CVE-2025-9264 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/…
Medium CVSS: 5.3

CVE-2025-9264

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource identifiers. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Vendor
Xuxueli
Product
Xxl-job
CWE
CWE-99
Yayın Tarihi
2025-08-21 00:15:29
Güncelleme
2025-09-11 18:28:39
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-99 Xxl-job MEDIUM Xuxueli 2025

Referanslar

https://github.com/xuxueli/xxl-job/issues/3773 https://github.com/xuxueli/xxl-job/issues/3773#issue-3308389841 https://vuldb.com/?ctiid.320806 https://vuldb.com/?id.320806 https://vuldb.com/?submit.631728 https://github.com/xuxueli/xxl-job/issues/3773