critical9.8
CVE-2022-40929
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks.
Impact
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xuxueli | Xxl-Job | Version 2.2.0 |