Executive brief
xxl-job-admin vulnerable to Remote Code Execution
Affected products
- Maven com.xuxueli:xxl-job-admin
Junglewise Threat Intelligence
CVE-2023-48089: xxl-job-admin vulnerable to Remote Code Execution
CVE-2023-48089 · Severity: low · CVSS 3.1 · Published 2023-11-15
Technologies: com.xuxueli:xxl-job-admin (Maven). Vendors: Maven.
Related threats
- Xuxueli xxl-job IDOR in Execution Log Handler
- xxl-job Jobs Handler remove function allows improper control of resource identifiers via ID parameter
- xxl-job Vulnerable to Resource Injection and Authorization Bypass Through User-Controlled Key
- xxl-job has Inadequate Encryption Strength
- xxl-job-admin vulnerable to Insecure Permissions