New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XXL-JOB接口api/registry存在存储型XSS漏洞，当管理员登录后台触发XSS，攻击者可通过XSS获取管理员登录凭证进而实现远程命令执行 #3542

Open

zhangyu007 opened this issue Sep 12, 2024 · 0 comments

zhangyu007 commented Sep 12, 2024

Please answer some questions before submitting your issue. Thanks!

Which version of XXL-JOB do you using?

Expected behavior

Actual behavior

Steps to reproduce the behavior

Other information

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment