Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37380
HistoryOct 03, 2022 - 3:38 a.m.

Malicious Command Execution

2022-10-0303:38:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
xxl-job-core
vulnerability
task management
malicious command execution
software

0.002 Low

EPSS

Percentile

61.1%

xxl-job-core is vulnerable to malicious command execution. Lack of sanitization of new task in task management module of the background management allows an attacker to inject and execute malicious commands.

CPENameOperatorVersion
xxl-job-coreeq2.3.1
xxl-job-coreeq2.3.1

0.002 Low

EPSS

Percentile

61.1%

Related for VERACODE:37380