Please answer some questions before submitting your issue. Thanks!

### Which version of XXL-JOB do you using?
xxl-job-core-2.4.1.jar

### Expected behavior
期望修复掉目前无法通过的漏洞

### Actual behavior
我们公司是用 snyk （一个用户量很大的安全平台），扫描出2.4.1也就是截止issue发布的最新版本存在两个无法通过的漏洞
漏洞一：Command injection
![image](https://github.com/xuxueli/xxl-job/assets/8198587/9a93623d-ccb0-4c37-af42-fbcd5a5bddc4)

漏洞二：CSRF
![image](https://github.com/xuxueli/xxl-job/assets/8198587/6120d20a-ed45-4c43-893c-b68c03d81b7e)

请问有上述漏洞的修复计划么？
snyk 扫描最新版本xxl-job-core-2.4.1 漏洞详情
This is a GitHub Issue
repo:xxl-job
owner:xuxueli
Title : snyk 扫描最新版本xxl-job-core-2.4.1 漏洞详情
Issue date:

--- start body ---
Please answer some questions before submitting your issue. Thanks!

### Which version of XXL-JOB do you using?
xxl-job-core-2.4.1.jar

### Expected behavior
期望修复掉目前无法通过的漏洞

### Actual behavior
我们公司是用 snyk （一个用户量很大的安全平台），扫描出2.4.1也就是截止issue发布的最新版本存在两个无法通过的漏洞
漏洞一：Command injection
![image](https://github.com/xuxueli/xxl-job/assets/8198587/9a93623d-ccb0-4c37-af42-fbcd5a5bddc4)

漏洞二：CSRF
![image](https://github.com/xuxueli/xxl-job/assets/8198587/6120d20a-ed45-4c43-893c-b68c03d81b7e)

请问有上述漏洞的修复计划么？
--- end body ---

The issue reports two security vulnerabilities in the xxl-job-core-2.4.1 version: a Command Injection vulnerability and a Cross-Site Request Forgery (CSRF) vulnerability. These vulnerabilities could allow an attacker to execute arbitrary commands on the server and perform unauthorized actions on behalf of users, respectively.