CyberRota Analysis
AI-GeneratedThe xxl-job-admin web application version 3.0.0 is vulnerable to a Cross-Site Request Forgery (CSRF) attack, enabling unauthorized modifications to Glue IDE shell scripts due to inadequate CSRF token validation and overly permissive HTTP method handling. This critical vulnerability poses a significant risk to any organization using this application, as it can lead to unauthorized access and manipulation of sensitive scripts. Organizations utilizing this web application should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive request mapping