com.github.kolema-tech:sigma-xxljob (>=1.0.7, <=1.0.8) potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (1.9.1)

com.xuxueli:xxl-job-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - com.github.kolema-tech:sigma-xxljob =1.0.7, =1.0.8 Source cves: CVE-2022-40929 Source advisory:...

cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) +50 more potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (>=2.0.1, <=2.2.0)

com.xuxueli:xxl-job-core MAVEN version =2.0.1, =1.0.0-release, =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =2.1.1-release, =6.1.0, =0.0.4, =1.5.13, =1.7.1 - com.gitee.zodiacstack:zodiac-xxljob-spring-boot-starter 1.5.16 - com.github.hiwepy:xxljob-spring-boot-starter 1.0.0.release -...

org.nutz:nutzboot-starter-xxl-job-executor (>=2.1.0, <=2.5.1.v20220215) potentially affected by CVE-2022-40929 via com.xuxueli:xxl-job-core (1.9.0)

com.xuxueli:xxl-job-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - org.nutz:nutzboot-starter-xxl-job-executor =2.1.0, =2.5.1.v20220215 Source cves: CVE-2022-40929 Source advisory...

CVE-2022-40929

creationtimestamp| type| source ---|---|--- 2022-09-28 22:34:19+00:00| seen| https://t.me/cibsecurity/50614...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

CVE-2022-40929

XXL-JOB 2.2.0 (and earlier) is affected by a command execution vulnerability in background tasks. The root cause is lack of sanitization when creating new tasks in the background management module, which can allow an attacker to inject and run arbitrary commands. Some sources dispute the CVE’s se...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...

CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case running arbitrary Bash scripts on behalf of users...