CVE-2025-9263

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

CVE-2025-9263 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

Server-Side Request Forgery

xxl-job is vulnerable to server-side request forgery. The vulnerability exists because the JobLogController.java allows ssrf bypass via executing arbitrary commands...

GHSA-83W4-X5W9-HF4H XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

XXL-Job before v2.4.0 contains a Server-Side Request Forgery SSRF via the component /admin/controller/JobLogController.java...

XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

XXL-Job before v2.4.0 contains a Server-Side Request Forgery SSRF via the component /admin/controller/JobLogController.java...

CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery SSRF via the component /admin/controller/JobLogController.java...

CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery SSRF via the component /admin/controller/JobLogController.java...

CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery SSRF via the component /admin/controller/JobLogController.java...

CVE-2022-43183

XXL-JOB prior to v2.3.1 is affected by a Server-Side Request Forgery (SSRF) in the component /admin/controller/JobLogController.java . The issue stems from the code path handling JobLog operations, enabling SSRF according to multiple connected sources. The public CVE entry CVE-2022-43183 consolid...