Known vulnerabilities in xxl-job

Vendor: xuxueli
Software: xxl-job
Software CPE: cpe:2.3:a:xuxueli:xxl-job:*:*:*:*:*:*:*:*
Website: https://www.xuxueli.com/
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xxl-job xxl-job is affected by 8 known vulnerabilities: 1 critical, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74006 - Improper Access Control
CVE-2022-36157		 CWE-284 Medium
No
No
 2.4.0 24.03.2023 SB2023032411
#VU74005 - Server-Side Request Forgery (SSRF)
CVE-2022-43183		 CWE-918 Low
No
No
 2.4.0 24.03.2023 SB2023032411
#VU72049 - Cross-Site Request Forgery (CSRF)
CVE-2023-0674		 CWE-352 Low
No
No
 - 08.02.2023 SB2023020842
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 2.3.1 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU57510 - Improper input validation
CVE-2021-2471		 CWE-20 Medium
Available
No
 2.3.1 19.10.2021 SB2021101941
SB2022032018
SB2022042256
and 12 more
#VU49192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-29204		 CWE-79 Low
No
No
 2.3.0 27.12.2020 SB2020091022
#VU46581 - Exposure of sensitive information to an unauthorized actor
CVE-2020-23811		 CWE-200 Medium
No
No
 2.3.0 10.09.2020 SB2020091022
#VU46579 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-23814		 CWE-79 Low
No
No
 2.3.0 10.09.2020 SB2020091022