CVE-2023-48088: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

November 15, 2023

xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.

References

github.com/advisories/GHSA-6733-7rp7-vf3m
github.com/xuxueli/xxl-job/issues/3329
nvd.nist.gov/vuln/detail/CVE-2023-48088

Detect and mitigate CVE-2023-48088 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →