GHSA-cpfp-m5qw-c4r3
GitHub Security Advisory
Improper Preservation of Permissions in xxl-job
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Insecure Permissions vulnerability in xxl-job v.2.4.1 allows a remote attacker to execute arbitrary code via the Sub-Task ID component.
Affected Packages
Maven
com.xuxueli:xxl-job-core
Affected versions:
0
(fixed in 2.4.2)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 1, 2025 6:44 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.