Security Advisory

CVE-2020-24922

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-11 00:00:00
Last updated 2024-10-09 19:56:49
Assigner mitre
State PUBLISHED

Description

Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file.