CVE-2022-43183

Description

XXL-Job before v2.4.0 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

Affected packages (1)

• Maven/com.xuxueli:xxl-job-corefrom 0, < 2.4.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-43183
• PATCHhttps://github.com/xuxueli/xxl-job
• WEBhttps://github.com/xuxueli/xxl-job/commit/9293c61ca0a8d54afdfb27cc568885ae639a14dc
• WEBhttps://github.com/xuxueli/xxl-job/issues/3002
• WEBhttps://github.com/xuxueli/xxl-job/releases/tag/2.3.1