Description
XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3002
Related Vulnerabilities
CVE-2021-40111 Vulnerability in maven package org.apache.james:james-server
CVE-2020-10991 Vulnerability in maven package org.mule.modules:mule-module-apikit
CVE-2023-38507 Vulnerability in npm package @strapi/admin
CVE-2020-15231 Vulnerability in maven package org.mapfish.print:print-standalone
CVE-2016-10735 Vulnerability in maven package org.jszip.redist:bootstrap