CVE-2023-33779

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-33779

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-33779.json

Aliases

• GHSA-9mmj-64jh-ph9c

Published

2023-05-26T17:15:18Z

Modified

2024-04-18T01:00:31.716059Z

Details

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/.

References

• https://github.com/silence-silence/xxl-job-lateral-privilege-escalation-vulnerability-/blob/main/README.md
• http://xxl-job.com
• https://github.com/xuxueli/xxl-job