Xxl-job@* Security Vulnerabilities and Issues — Xxl-job@* CVE List

Lucene search

XuxueliXxl-job*

2 matches found

CVE•added 2022/11/17 9:15 p.m.•62 views

CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

8.8CVSS8.6AI score0.18025EPSS

CVE•added 2022/08/19 10:15 p.m.•60 views

CVE-2022-36157

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.

8.8CVSS8.7AI score0.09014EPSS