xxl-job-admin vulnerable to Remote Code Execution

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-48089 · ADVISORY
• xuxueli/xxl-job · WEB
• xuxueli/xxl-job · PACKAGE

More vulnerabilities in com.xuxueli:xxl-job-admin

• CVE-2026-7303LOW 3.7A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2. Impacted is the function logDetailCat of the file xxl-job-admin/src/main…
• CVE-2025-9264MEDIUM 5.4A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/j…
• CVE-2025-9263MEDIUM 4.3A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /sr…
• CVE-2025-7789LOW 3.7A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of …
• CVE-2023-48088MEDIUM 5.4xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.