Home > Vulnerability Database > CVE-2022-43183

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2022-43183

Good to know:

Date: November 16, 2022

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

Language: Java

Severity Score

8.8

Related Resources (6)

Url: https://github.com/xuxueli/xxl-job/issues/3002

Url: https://nvd.nist.gov/vuln/detail/CVE-2022-43183

Url: https://github.com/xuxueli/xxl-job/releases/tag/2.3.1

Url: https://github.com/xuxueli/xxl-job

Url: https://github.com/xuxueli/xxl-job/commit/9293c61ca0a8d54afdfb27cc568885ae639a14dc

Url: https://www.mend.io/vulnerability-database/CVE-2022-43183

Severity Score

8.8

Weakness Type (CWE)

Server-Side Request Forgery (SSRF)

CWE-918

Top Fix

Upgrade Version

Upgrade to version com.xuxueli:xxl-job-core:2.3.1

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Do you need more information?

Contact Us