Lucene search

GoogleOSV:CVE-2022-40929

HistorySep 28, 2022 - 6:15 p.m.

CVE-2022-40929

2022-09-2818:15:09

Google

osv.dev

xxl-job

command execution

vulnerability

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks.

CPENameOperatorVersion
xxl-jobeq1.7.1
xxl-jobeq1.3.2
xxl-jobeq1.8.2
xxl-jobeq2.0.2
xxl-jobeq2.1.2
xxl-jobeq1.7.0
xxl-jobeq2.0.1
xxl-jobeq2.2.0
xxl-jobeq1.5.2
xxl-jobeq1.8.0

Name	Operator	Version
xxl-job	eq	1.7.1
xxl-job	eq	1.3.2
xxl-job	eq	1.8.2
xxl-job	eq	2.0.2
xxl-job	eq	2.1.2
xxl-job	eq	1.7.0
xxl-job	eq	2.0.1
xxl-job	eq	2.2.0
xxl-job	eq	1.5.2
xxl-job	eq	1.8.0

Rows per page:

1-10 of 281

References

github.com/xuxueli/xxl-job/issues/2979