Xuxueli

Xxl-job

24 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-9264

Exploit
  • EPSS 0.05%
  • Veröffentlicht 20.08.2025 23:32:06
  • Zuletzt bearbeitet 11.09.2025 18:28:39

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argum...

5.3

CVE-2025-9263

Exploit
  • EPSS 0.04%
  • Veröffentlicht 20.08.2025 23:02:09
  • Zuletzt bearbeitet 11.09.2025 18:29:33

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup lea...

3.7

CVE-2025-7789

Exploit
  • EPSS 0.02%
  • Veröffentlicht 18.07.2025 15:14:05
  • Zuletzt bearbeitet 11.09.2025 19:35:57

A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. Th...

8.8

CVE-2025-7788

Exploit
  • EPSS 0.23%
  • Veröffentlicht 18.07.2025 15:02:05
  • Zuletzt bearbeitet 11.09.2025 19:52:04

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipu...

8.8

CVE-2025-7787

Exploit
  • EPSS 0.05%
  • Veröffentlicht 18.07.2025 14:14:05
  • Zuletzt bearbeitet 11.09.2025 17:16:38

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server...

8.8

CVE-2024-42681

Exploit
  • EPSS 0.7%
  • Veröffentlicht 15.08.2024 17:15:18
  • Zuletzt bearbeitet 19.08.2024 19:35:08

Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.

9.8

CVE-2024-3366

Exploit
  • EPSS 0.11%
  • Veröffentlicht 06.04.2024 11:15:08
  • Zuletzt bearbeitet 18.07.2025 18:49:58

A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of the file com/xxl/job/core/util/JdkSerializeTool.java of the component Template Handler. The manipulation leads ...

8.8

CVE-2024-24113

Exploit
  • EPSS 0.07%
  • Veröffentlicht 08.02.2024 13:15:09
  • Zuletzt bearbeitet 15.05.2025 20:15:45

xxl-job =< 2.4.1 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control executor to RCE.

8.8

CVE-2023-48089

Exploit
  • EPSS 1.29%
  • Veröffentlicht 15.11.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:31:05

xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.

5.4

CVE-2023-48088

Exploit
  • EPSS 0.09%
  • Veröffentlicht 15.11.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:31:05

xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.