Description
XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3002
Related Vulnerabilities
CVE-2021-41174 Vulnerability in npm package @grafana/data
CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api
CVE-2021-25930 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2020-7625 Vulnerability in npm package op-browser
CVE-2021-43306 Vulnerability in maven package org.webjars:jquery-validation