Approved changes feed: RSS · Atom

cpe:2.3:a:xuxueli:xxl-job:2.4.1:*:*:*:*:*:*:*

part: a version: 2.4.1 update: *

VendorXuxueli (690331ff-ebee-51eb-b711-ce74ad30d885)
ProductXxl Job (55f49380-6869-5efc-ba72-4002a327c9a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/xuxueli/xxl-job purl2cpe 2026-06-01 10:15:56.163909
pkg:maven/com.xuxueli/xxl-job purl2cpe 2026-06-01 10:15:56.163911

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42681 vulnerable 2026-06-08 06:45:46.890244 Details available
Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.
Published: 2024-08-15T00:00:00.000Z
Updated: 2024-08-19T18:40:14.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33779 vulnerable 2026-06-08 06:06:23.534939 Details available
A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/.
Published: 2023-05-26T00:00:00.000Z
Updated: 2026-07-09T00:26:10.819Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.