Remote Code Execution Vulnerability in XXL Job Admin by Xuxueli
CVE-2023-48089

8.8HIGH

Key Information:

Vendor

Xuxueli

Status
Xxl-job
Vendor
CVE Published:
15 November 2023

What is CVE-2023-48089?

The XXL Job Admin version 2.4.0 is susceptible to Remote Code Execution (RCE), allowing attackers to exploit the system via the /xxl-job-admin/jobcode/save endpoint. This vulnerability can lead to unauthorized access and execution of arbitrary commands, potentially compromising the system's integrity and security.

References

https://github.com/xuxueli/xxl-job/issues/3333

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.