CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.72% chance of exploitation in the next 30 days, 77th percentile

Published

2022-11-17

Updated

2025-04-29

Proof-of-concept exploits (1)

• xuxueli/xxl-job/issues/300230620★ · 2026-10-09

Security advisories

• advisories/GHSA-83w4-x5w9-hf4h

References

• CVE Record
• NVD entry

Related

• CVE-2020-23814
• CVE-2020-24922
• CVE-2020-29204
• CVE-2022-29002
• CVE-2022-29770
• CVE-2024-3366