- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 6 · 1 critical, 2 high, 1 medium, 1 low
- Registry
- Maven Central
Advisories 6
- CVE-2025-7787Medium 5.3
Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery
Affected: through 3.1.1.
- CVE-2024-42681High 8.8
Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.
Affected: fixed in 2.4.2.
- CVE-2024-3366Low 3.5
Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection
Affected: through 2.4.0.
- CVE-2022-43183High 8.8
XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
Affected: fixed in 2.4.0.
- CVE-2022-40929Critical 9.8
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks.
Affected: through 2.2.0.
- CVE-2020-29204Unrated
XXL-JOB 2.2.0 allows Stored XSS (in Add User) to bypass the 20-character limit via…
Affected: fixed in 2.3.0.