CVE-2025-60645
A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request.
More information : https://gist.github.com/LockeTom/77fb982a49dee956101810bbefa09fb4
A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request.
More information : https://gist.github.com/LockeTom/77fb982a49dee956101810bbefa09fb4