Description
quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple parties because it is not plausible that untrusted user input would reach the code location where injection must occur.
Advisories 2
- NCSC-2025-0026 Kwetsbaarheden verholpen in Oracle JD Edwards NCSC-NL (Netherlands) · Jan 22, 2025
- WID-SEC-2023-2688 Oracle Retail Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023