Skip to contentXuxueli Xxl-job vulnerabilities
- xuxueli xxl-jobxuxueli xxl-job insert cross site scriptingCVE-2026-944265.1 Medium
- xuxueli xxl-jobxuxueli xxl-job Task Management JobInfoController.java cross site scriptingCVE-2026-941455.1 Medium
- xuxueli xxl-jobXuxueli xxl-job insert cross site scriptingCVE-2026-904895.1 Medium
- xuxueli xxl-jobXuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injectionCVE-2026-904885.3 Medium
- xuxueli xxl-jobXuxueli xxl-job JobGroupController.java privileges managementCVE-2026-904875.3 Medium
- xuxueli xxl-jobxxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCatCVE-2026-653167.1 High
- xuxueli xxl-jobXuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded keyCVE-2026-73066.3 Medium
- xuxueli xxl-jobXuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgeryCVE-2026-7305Disputed5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injectionCVE-2026-7303Fix available6.3 Medium
- xuxueli xxl-jobxuxueli xxl-job JobInfoController.java server-side request forgeryCVE-2026-37335.3 Medium
- xuxueli xxl-jobXuxueli xxl-job Jobs JobInfoController.java remove resource injectionCVE-2025-9264Fix available5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job JobLogController.java getJobsByGroup resource injectionCVE-2025-9263Fix available5.3 Medium
- xuxueli xxl-jobXuxueli xxl-job Token Generation IndexController.java makeToken weak password hashCVE-2025-7789Fix available6.3 Medium
- xuxueli xxl-jobXuxueli xxl-job SampleXxlJob.java commandJobHandler os command injectionCVE-2025-77885.3 Medium
- xuxueli xxl-jobXuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgeryCVE-2025-77875.3 Medium
- xuxueli xxl-jobImproper Preservation of Permissions in xxl-jobCVE-2024-42681Fix available8.8 High
- xuxueli xxl-jobXuxueli xxl-job Template JdkSerializeTool.java deserialize injectionCVE-2024-33663.5 Low
- xuxueli xxl-jobXXL-JOB vulnerable to Server-Side Request ForgeryCVE-2024-241138.8 High
- xuxueli xxl-jobxxl-job-admin vulnerable to Remote Code ExecutionCVE-2023-480898.8 High
- xuxueli xxl-jobxxl-job-admin vulnerable to Cross Site ScriptingCVE-2023-480885.4 Medium
- xuxueli xxl-jobxxl-job-admin vulnerable to Insecure PermissionsCVE-2023-480875.4 Medium
- xuxueli xxl-jobxuxueli xxl-job Cross-Site Request Forgery VulnerabilityCVE-2020-249228.8 High
- xuxueli xxl-jobPrivilege escalation in XXL-JobCVE-2023-337798.8 High
- xuxueli xxl-jobXXL-JOB vulnerable to Cross-site ScriptingCVE-2023-261205.4 Medium
- xuxueli xxl-jobXuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameterCVE-2023-270877.5 High
- xuxueli xxl-jobXXL-JOB New Password updatePwd cross-site request forgeryCVE-2023-06744.3 Medium
- xuxueli xxl-jobXXL-JOB vulnerable to Server-Side Request Forgery (SSRF)CVE-2022-43183Fix available8.8 High
- xuxueli xxl-jobXXL-JOB contains a Command execution vulnerability in background tasksCVE-2022-40929Disputed9.8 Critical
- xuxueli xxl-jobImproper Privilege Management in com.xuxueli:xxl-jobCVE-2022-36157Fix available8.8 High
- xuxueli xxl-jobCross site scripting in XXL-jobCVE-2022-297705.4 Medium
- xuxueli xxl-jobCross-Site Request Forgery in XXL-JobCVE-2022-290028.8 High
- xuxueli xxl-jobCross-site Scripting in XXL-JOBCVE-2020-29204Public exploitFix available6.1 Medium
- xuxueli xxl-jobxxl-job Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2020-23814Fix available6.1 Medium
- xuxueli xxl-jobxxl-job sensitive data exposureCVE-2020-238117.5 High