CVE-2025-7789: Xuxueli xxl-job Token Generation IndexController.java makeToken weak password hash
A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with insufficient computational effort. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7789?
CVE-2025-7789 is classified as problematic, indicating a significant vulnerability that affects security.
How do I fix CVE-2025-7789?
To mitigate CVE-2025-7789, update Xuxueli xxl-job to a version later than 3.1.1 as it contains the necessary security fixes.
What specific component is affected by CVE-2025-7789?
CVE-2025-7789 affects the Token Generation component in the makeToken function within the IndexController.java file.
What is the impact of CVE-2025-7789 on my application?
CVE-2025-7789 could lead to unauthorized access due to vulnerabilities in password handling and token generation.
Which versions of Xuxueli xxl-job are vulnerable to CVE-2025-7789?
Xuxueli xxl-job versions up to and including 3.1.1 are vulnerable to CVE-2025-7789.