CVE-2022-40929

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-28

Last modified

2025-05-21

Weaknesses

CWE-78

Affected products

• Xxl-job (Xuxueli)

References

• https://github.com/xuxueli/xxl-job/issues/2979