Improper Preservation of Permissions in xxl-job

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-42681 · ADVISORY
• xuxueli/xxl-job · WEB
• xuxueli/xxl-job commit a2dc901 · WEB
• xuxueli/xxl-job · PACKAGE

Lỗ hổng khác của com.xuxueli:xxl-job-core

• CVE-2025-7787CAO 8.8A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the …
• CVE-2024-3366NGHIÊM TRỌNG 9.8A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of t…
• CVE-2022-43183CAO 8.8XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
• CVE-2022-40929NGHIÊM TRỌNG 9.8XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an i…
• CVE-2020-29204TRUNG BÌNH 6.1XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via xxl-job-admin/src/main/java/com/xxl/job/admin/controller/…