High · 8.8 CVE-2022-43183 EUVD-2022-7276GHSA-83w4-x5w9-hf4h

XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

Published Nov 17, 2022 · Updated Apr 29, 2025 · Assigned by mitre

Description

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

Ecosystem	Package	Affected	Fixed	Record
Maven	com.xuxueli:xxl-job-core	< 2.4.0	2.4.0	GHSA-83w4-x5w9-hf4h