XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
| Software | From | Fixed in |
|---|---|---|
| xuxueli / xxl-job | - | 2.3.1.x |
com.xuxueli / xxl-job-core
|
- | 2.3.1 |