Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38126
HistoryNov 21, 2022 - 5:02 a.m.

Server-Side Request Forgery

2022-11-2105:02:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
xxl-job
vulnerability
server-side request forgery
joblogcontroller
arbitrary commands

0.001 Low

EPSS

Percentile

37.7%

xxl-job is vulnerable to server-side request forgery. The vulnerability exists because the JobLogController.java allows ssrf bypass via executing arbitrary commands.

CPENameOperatorVersion
xxl-joble2.3.1
xxl-joble2.3.1

0.001 Low

EPSS

Percentile

37.7%

Related for VERACODE:38126