~ / search / GHSA-83w4-x5w9-hf4h

GHSA-83w4-x5w9-hf4h

XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)

Source: GitHub Advisory Database (reviewed) High CVE-2022-43183

Packages

EcosystemPackageAffectedFixed in
Maven com.xuxueli:xxl-job-core < 2.4.0 2.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

XXL-Job before v2.4.0 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

References

External links from the advisory. They lead to third-party sites.