A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| com.xuxueli:xxl-job-core(Maven) | 0 | N/A | N/A |
CVSS Metrics
