Approved changes feed: RSS · Atom

cpe:2.3:a:xuxueli:xxl-job:2.4.0:*:*:*:*:*:*:*

part: a version: 2.4.0 update: *

VendorXuxueli (690331ff-ebee-51eb-b711-ce74ad30d885)
ProductXxl Job (55f49380-6869-5efc-ba72-4002a327c9a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/xuxueli/xxl-job purl2cpe 2026-06-01 10:15:56.163906
pkg:maven/com.xuxueli/xxl-job purl2cpe 2026-06-01 10:15:56.163908

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-48089 vulnerable 2026-06-08 06:14:26.026127 Details available
xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.
Published: 2023-11-15T00:00:00.000Z
Updated: 2024-08-29T20:06:57.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48088 vulnerable 2026-06-08 06:14:26.025618 Details available
xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.
Published: 2023-11-15T00:00:00.000Z
Updated: 2024-08-29T17:52:00.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48087 vulnerable 2026-06-08 06:14:26.024856 Details available
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Published: 2023-11-15T00:00:00.000Z
Updated: 2024-08-12T14:31:11.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.