Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

XXL-JOB — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in XXL-JOB, with AI-generated Chinese analysis, references, and POCs.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-7306 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key CWE-321 5.6 Medium2026-04-28
CVE-2026-7305 Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery CWE-918 6.3 Medium2026-04-28
CVE-2026-7303 Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection CWE-99 3.7 Low2026-04-28
CVE-2026-3733 xuxueli xxl-job JobInfoController.java server-side request forgery CWE-918 6.3 Medium2026-03-08
CVE-2025-9264 Xuxueli xxl-job Jobs JobInfoController.java remove resource injection CWE-99 5.4 Medium2025-08-20
CVE-2025-9263 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection CWE-99 4.3 Medium2025-08-20
CVE-2025-7789 Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash CWE-916 3.7 Low2025-07-18
CVE-2025-7788 Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection CWE-78 6.3 Medium2025-07-18
CVE-2025-7787 Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery CWE-918 6.3 Medium2025-07-18
CVE-2024-3366 Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection CWE-74 3.5 Low2024-04-06
CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery CWE-352 4.3 Medium2023-02-04

All 11 known CVE vulnerabilities affecting XXL-JOB with full Chinese analysis, references, and POCs where available.