CVE-2024-24113: SSRF
xxl-job <= 2.4.2 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control executor to RCE.
Other sources
xxl-job =< 2.4.1 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control executor to RCE.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24113?
CVE-2024-24113 is considered a critical vulnerability due to its ability to allow low-privileged users to achieve remote code execution.
How do I fix CVE-2024-24113?
To fix CVE-2024-24113, update xxl-job to version 2.4.1 or higher which addresses the SSRF vulnerability.
Which versions of xxl-job are affected by CVE-2024-24113?
CVE-2024-24113 affects all versions of xxl-job up to and including 2.4.0 and 2.4.1.
What attack vector does CVE-2024-24113 exploit?
CVE-2024-24113 exploits a Server-Side Request Forgery (SSRF) vulnerability that allows low-privileged users to control the executor.
Can CVE-2024-24113 lead to data breaches?
Yes, CVE-2024-24113 has the potential to lead to data breaches due to its capability for remote code execution.