Vulnerabilidades en xuxueli
13 resultadosAnálisis Vexday
O fornecedor xuxueli apresenta um perfil de risco baixo com apenas 2 CVEs registradas na base, nenhuma sob ataque ativo no momento. Uma vulnerabilidade foi publicada nos últimos 90 dias, enquanto não há registros de gravidade crítica, sendo a fraqueza dominante relacionada a controle de acesso (CWE-639).
CVE-2025-7788MEDIUMXuxueli xxl-job SampleXxlJob.java commandJobHandler os command injectionEPSS 5.4%CVE-2024-3366LOWXuxueli xxl-job Template JdkSerializeTool.java deserialize injectionEPSS 0.9%CVE-2025-7787MEDIUMXuxueli xxl-job SampleXxlJob.java httpJobHandler server-side request forgeryEPSS 0.4%CVE-2026-7303MEDIUMXuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injectionEPSS 0.4%CVE-2025-6700MEDIUMXuxueli xxl-sso login cross site scriptingEPSS 0.4%CVE-2026-65316HIGHxxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCatEPSS 0.4%CVE-2025-9264MEDIUMXuxueli xxl-job Jobs JobInfoController.java remove resource injectionEPSS 0.3%CVE-2026-7306MEDIUMXuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded keyEPSS 0.3%CVE-2025-9263MEDIUMXuxueli xxl-job JobLogController.java getJobsByGroup resource injectionEPSS 0.3%CVE-2025-7789MEDIUMXuxueli xxl-job Token Generation IndexController.java makeToken weak password hashEPSS 0.3%CVE-2025-6701MEDIUMXuxueli xxl-sso doLogin redirectEPSS 0.3%CVE-2026-3733MEDIUMxuxueli xxl-job JobInfoController.java server-side request forgeryEPSS 0.2%CVE-2026-7305MEDIUMXuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgeryEPSS 0.2%