Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.xuxueli/xxl-job@2.4.1
purl pkg:maven/com.xuxueli/xxl-job@2.4.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.0
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-c352-x843-ggpq
Aliases:
CVE-2024-24113
XXL-JOB vulnerable to Server-Side Request Forgery xxl-job <= 2.4.2 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users … There are no reported fixed by versions.
GHSA-9mmj-64jh-ph9c
Aliases:
CVE-2023-33779
Privilege escalation in XXL-Job A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another … There are no reported fixed by versions.
This package is not known to fix any advisories.