Xuxueli vulnerabilities

Products

• Xxl-job 34
• Xxl-api 2
• Xxl-sso 2

Newest

• xuxueli xxl-job xuxueli xxl-job insert cross site scripting CVE-2026-94426 5.1 MediumSeptember 21, 2026
• xuxueli xxl-job xuxueli xxl-job Task Management JobInfoController.java cross site scripting CVE-2026-94145 5.1 MediumSeptember 21, 2026
• xuxueli xxl-job Xuxueli xxl-job insert cross site scripting CVE-2026-90489 5.1 MediumSeptember 12, 2026
• xuxueli xxl-job Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection CVE-2026-90488 5.3 MediumSeptember 12, 2026
• xuxueli xxl-job Xuxueli xxl-job JobGroupController.java privileges management CVE-2026-90487 5.3 MediumSeptember 12, 2026
• xuxueli xxl-job xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat CVE-2026-65316 7.1 HighJuly 21, 2026
• xuxueli xxl-job Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key CVE-2026-7306 6.3 MediumApril 28, 2026
• xuxueli xxl-job Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery CVE-2026-7305 Disputed 5.3 MediumApril 28, 2026
• xuxueli xxl-job Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection CVE-2026-7303 Fix available 6.3 MediumApril 28, 2026
• xuxueli xxl-job xuxueli xxl-job JobInfoController.java server-side request forgery CVE-2026-3733 5.3 MediumMarch 8, 2026
• xuxueli xxl-api A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0... CVE-2025-60646 6.1 MediumNovember 12, 2025
• xuxueli xxl-api A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users... CVE-2025-60645 6.5 MediumNovember 12, 2025
• xuxueli xxl-job Xuxueli xxl-job Jobs JobInfoController.java remove resource injection CVE-2025-9264 Fix available 5.3 MediumAugust 20, 2025
• xuxueli xxl-job Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection CVE-2025-9263 Fix available 5.3 MediumAugust 20, 2025
• xuxueli xxl-job Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash CVE-2025-7789 Fix available 6.3 MediumJuly 18, 2025
• xuxueli xxl-job Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection CVE-2025-7788 5.3 MediumJuly 18, 2025
• xuxueli xxl-job Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery CVE-2025-7787 5.3 MediumJuly 18, 2025
• xuxueli xxl-sso Xuxueli xxl-sso doLogin redirect CVE-2025-6701 5.1 MediumJune 26, 2025
• xuxueli xxl-sso Xuxueli xxl-sso login cross site scripting CVE-2025-6700 5.3 MediumJune 26, 2025
• xuxueli xxl-job Improper Preservation of Permissions in xxl-job CVE-2024-42681 Fix available 8.8 HighAugust 15, 2024
• xuxueli xxl-job Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection CVE-2024-3366 3.5 LowApril 6, 2024
• xuxueli xxl-job XXL-JOB vulnerable to Server-Side Request Forgery CVE-2024-24113 8.8 HighFebruary 8, 2024
• xuxueli xxl-job xxl-job-admin vulnerable to Remote Code Execution CVE-2023-48089 8.8 HighNovember 15, 2023
• xuxueli xxl-job xxl-job-admin vulnerable to Cross Site Scripting CVE-2023-48088 5.4 MediumNovember 15, 2023
• xuxueli xxl-job xxl-job-admin vulnerable to Insecure Permissions CVE-2023-48087 5.4 MediumNovember 15, 2023
• xuxueli xxl-job xuxueli xxl-job Cross-Site Request Forgery Vulnerability CVE-2020-24922 8.8 HighAugust 11, 2023
• xuxueli xxl-job Privilege escalation in XXL-Job CVE-2023-33779 8.8 HighMay 26, 2023
• xuxueli xxl-job XXL-JOB vulnerable to Cross-site Scripting CVE-2023-26120 5.4 MediumApril 10, 2023
• xuxueli xxl-job Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter CVE-2023-27087 7.5 HighMarch 21, 2023
• xuxueli xxl-job XXL-JOB New Password updatePwd cross-site request forgery CVE-2023-0674 4.3 MediumFebruary 4, 2023
• xuxueli xxl-job XXL-JOB vulnerable to Server-Side Request Forgery (SSRF) CVE-2022-43183 Fix available 8.8 HighNovember 17, 2022
• xuxueli xxl-job XXL-JOB contains a Command execution vulnerability in background tasks CVE-2022-40929 Disputed 9.8 CriticalSeptember 28, 2022
• xuxueli xxl-job Improper Privilege Management in com.xuxueli:xxl-job CVE-2022-36157 Fix available 8.8 HighAugust 19, 2022
• xuxueli xxl-job Cross site scripting in XXL-job CVE-2022-29770 5.4 MediumJune 3, 2022
• xuxueli xxl-job Cross-Site Request Forgery in XXL-Job CVE-2022-29002 8.8 HighMay 23, 2022
• xuxueli xxl-job Cross-site Scripting in XXL-JOB CVE-2020-29204 Public exploitFix available 6.1 MediumDecember 27, 2020
• xuxueli xxl-job xxl-job Multiple cross-site scripting (XSS) vulnerabilities CVE-2020-23814 Fix available 6.1 MediumSeptember 3, 2020
• xuxueli xxl-job xxl-job sensitive data exposure CVE-2020-23811 7.5 HighSeptember 3, 2020
• xuxueli xxl-conf XXL-CONF Path Traversal vulnerability CVE-2018-20094 7.5 HighDecember 12, 2018