Lucene search
+L

1 matches found

Veracode
Veracode
added 2025/12/17 10:46 a.m.10 views

Weak Password Hash Generation

xxl-job is vulnerable to a Weak Password Hash Generation vulnerability. The vulnerability is due to insufficient computational effort in the 'makeToken' function of 'IndexController.java', where an attacker can manipulate the token-generation logic to obtain and resulting remote compromise...

6.3CVSS7AI score0.0028EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder