Описание
XXL-JOB contains a Command execution vulnerability in background tasks
XXL-JOB versions 2.2.0 and prior contain a Command execution vulnerability in background tasks.
NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
Пакеты
Наименование
com.xuxueli:xxl-job-core
maven
Затронутые версииВерсия исправления
<= 2.2.0
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
больше 3 лет назад
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).