Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-52371 EUVD-2026-51656GHSA-xw47-r6m7-qrhr

A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to sca…

Published Jul 31, 2026 · Updated Aug 3, 2026 · Assigned by mitre

Description

A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.

References