CVE-2025-7787

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...

cn.centychen:xxl-job-spring-boot-starter (>=1.0.0-release, <=1.0.1-release), cn.db101:xxl-job-spring-boot-starter (1.1.0) potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.0.2)

com.xuxueli:xxl-job-core MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.centychen:xxl-job-spring-boot-starter =1.0.0-release, =1.0.1-release - cn.db101:xxl-job-spring-boot-starter...

com.github.kolema-tech:sigma-xxljob (>=1.0.7, <=1.0.8) potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (1.9.1)

com.xuxueli:xxl-job-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - com.github.kolema-tech:sigma-xxljob =1.0.7, =1.0.8 Source cves: CVE-2025-7787 Source advisory:...

cn.fxbin.bubble:bubble-fireworks-plugin-xxl-job (>=0.0.8-release, <=0.0.9-release), cn.fxbin.bubble:bubble-fireworks-starter-xxl-job (>=0.0.8-release, <=0.0.9-release) +41 more potentially affected by CVE-2025-7787 via com.xuxueli:xxl-job-core (2.2.0)

com.xuxueli:xxl-job-core MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.xuxueli:xxl-job-core and may be impacted: - cn.fxbin.bubble:bubble-fireworks-plugin-xxl-job =0.0.8-release, =0.0.8-release, =1.6.0, =1.0.1, =6.1.1, =0.0.4,...

CVE-2025-7787

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...