Description
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
Remediation
References
https://github.com/xuxueli/xxl-job/issues/2979
Related Vulnerabilities
CVE-2021-32860 Vulnerability in maven package org.webjars.npm:izimodal
CVE-2023-39619 Vulnerability in npm package node-email-check
CVE-2023-49397 Vulnerability in maven package com.jfinal:jfinal
CVE-2021-32828 Vulnerability in maven package org.nuxeo.ecm.platform:nuxeo-platform-oauth
CVE-2019-9155 Vulnerability in maven package org.webjars.npm:openpgp