← Database

CVE-2022-40929

CRITICAL CVSS: 9.8 Published: 2022-09-28 Modified: 2026-06-17

Description

XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).

Affected Platforms

Xuxueli Xxl-Job

Weakness Type

CWE-78, CWE-78

References