Description
XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.xuxueli:xxl-job | < 2.4.0 | 2.4.0 | GHSA-7qq9-9g2w-56f9 |