In breve
- CVE-2022-40929 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda com.xuxueli:xxl-job-core, xxl-job (xuxueli).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 76.1% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks.
NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
NVD description
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free