CVE-2022-43183

XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.

• CWE-918
• CWE-918

• https://github.com/xuxueli/xxl-job/issues/3002Exploit, Issue Tracking, Third Party Advisory
• https://github.com/xuxueli/xxl-job/issues/3002Exploit, Issue Tracking, Third Party Advisory

Published

Nov 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43169A stored cross-site scripting (XSS) vulnerability in the Use…5.4
• CVE-2022-4317An issue has been discovered in GitLab DAST analyzer affecti…6.1
• CVE-2022-43170A stored cross-site scripting (XSS) vulnerability in the Das…5.4
• CVE-2022-43171A heap buffer overflow in the LIEF::MachO::BinaryParser::par…6.5
• CVE-2022-43179Online Leave Management System v1.0 was discovered to contai…7.2
• CVE-2022-4318A vulnerability was found in cri-o. This issue allows the ad…7.8
• CVE-2022-43184D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a …9.8
• CVE-2022-43185A stored cross-site scripting (XSS) vulnerability in the Con…5.4
• CVE-2022-43192An arbitrary file upload vulnerability in the component /ded…6.7
• CVE-2022-43196dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion vi…9.1
• CVE-2022-4320The WordPress Events Calendar WordPress plugin before 1.4.5 …6.1
• CVE-2022-4321The PDF Generator for WordPress plugin before 1.1.2 includes…6.1