CVE-2023-27087
published 2023-03-21CVE-2023-27087: Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
PriorityP338high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.64%
46.2th percentile
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| xuxueli | xxl-job | — | — |
| xuxueli | xxl-job | — | — |
| xuxueli | xxl-job | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
osv·2023-03-21
CVE-2023-27087 [HIGH] Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
GHSA
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
ghsa·2023-03-21
CVE-2023-27087 [HIGH] CWE-280 Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-21
Published