Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

XXL-JOB — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in XXL-JOB, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability records for XXL-JOB, an open-source distributed task scheduling platform, focusing on implementation weaknesses and their associated Common Weakness Enumeration tags. The collection covers known security flaws reported within the product's public advisory history, spanning the period from its initial release through the most recent updates. Here, you can track the vendor's published advisories, analyze the distribution of specific weakness classes, and examine the chronological sequence of disclosed vulnerabilities. The data enables researchers and developers to map out the product's security posture over time, identifying recurring patterns in code defects or misconfigurations. By consolidating these records in one location, the page facilitates efficient review of historical incidents without navigating multiple external databases. This centralized view supports impact assessment for operations teams managing XXL-JOB deployments, allowing them to correlate advisory details with internal change logs to prioritize remediation efforts effectively.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-94426 xuxueli xxl-job insert cross site scripting CWE-79 3.5 Low 2026-09-21
CVE-2026-94145 xuxueli xxl-job Task Management JobInfoController.java cross site scripting CWE-79 3.5 Low 2026-09-21
CVE-2026-90489 Xuxueli xxl-job insert cross site scripting CWE-79 3.5 Low 2026-09-12
CVE-2026-90488 Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection CWE-94 6.3 Medium 2026-09-12
CVE-2026-90487 Xuxueli xxl-job JobGroupController.java privileges management CWE-269 4.3 Medium 2026-09-12
CVE-2026-65316 xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat CWE-639 6.5 Medium 2026-07-21
CVE-2026-7306 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key CWE-321 5.6 Medium 2026-04-28
CVE-2026-7305 Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery CWE-918 6.3 Medium 2026-04-28
CVE-2026-7303 Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection CWE-99 3.7 Low 2026-04-28
CVE-2026-3733 xuxueli xxl-job JobInfoController.java server-side request forgery CWE-918 6.3 Medium 2026-03-08
CVE-2025-9264 Xuxueli xxl-job Jobs JobInfoController.java remove resource injection CWE-99 5.4 Medium 2025-08-20
CVE-2025-9263 Xuxueli xxl-job JobLogController.java getJobsByGroup resource injection CWE-99 4.3 Medium 2025-08-20
CVE-2025-7789 Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash CWE-916 3.7 Low 2025-07-18
CVE-2025-7788 Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection CWE-78 6.3 Medium 2025-07-18
CVE-2025-7787 Xuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgery CWE-918 6.3 Medium 2025-07-18
CVE-2024-3366 Xuxueli xxl-job Template JdkSerializeTool.java deserialize injection CWE-74 3.5 Low 2024-04-06
CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery CWE-352 4.3 Medium 2023-02-04

All 17 known CVE vulnerabilities affecting XXL-JOB with full Chinese analysis, references, and POCs where available.