Description
XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
Remediation
References
https://github.com/xuxueli/xxl-job/issues/3002
Related Vulnerabilities
CVE-2016-10528 Vulnerability in npm package restafary
CVE-2021-3461 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2013-7379 Vulnerability in npm package tomato
CVE-2020-7679 Vulnerability in maven package org.webjars.bower:casperjs
CVE-2017-17837 Vulnerability in maven package org.apache.deltaspike.modules:jsf-module-project