Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-81229
HistoryNov 21, 2022 - 12:00 a.m.

XXL-JOB code issue vulnerability

2022-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
xxl-job
distributed task scheduling
java
security vulnerability
ssrf
server-side request forgery
cnvd

EPSS

0.001

Percentile

37.5%

XXL-JOB is a distributed task scheduling platform based on the java language from the Xu Xueli (XXL-JOB) community.A security vulnerability exists in versions prior to XXL-JOB v2.3.1, which stems from a vulnerability found via the component /admin/controller/JobLogController.java containing server-side request forgery ( SSRF). No detailed vulnerability details are currently available.

EPSS

0.001

Percentile

37.5%