CVE-2024-3366

A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of the file com/xxl/job/core/util/JdkSerializeTool.java of the component Template Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259480.

• CWE-74
• CWE-502

• https://github.com/xuxueli/xxl-job/issues/3391Exploit, Issue Tracking
• https://vuldb.com/?ctiid.259480Permissions Required, VDB Entry
• https://vuldb.com/?id.259480Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308180Third Party Advisory, VDB Entry
• https://github.com/xuxueli/xxl-job/issues/3391Exploit, Issue Tracking
• https://vuldb.com/?ctiid.259480Permissions Required, VDB Entry
• https://vuldb.com/?id.259480Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.308180Third Party Advisory, VDB Entry

Published

Apr 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33654A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2024-33655The DNS protocol in RFC 1035 and updates allows remote attac…7.5
• CVE-2024-33656The DXE module SmmComputrace contains a vulnerability that a…7.8
• CVE-2024-33657This SMM vulnerability affects certain modules, allowing pri…7.8
• CVE-2024-33658APTIOV contains a vulnerability in BIOS where an attacker ma…7.8
• CVE-2024-33659AMI APTIOV contains a vulnerability in BIOS where an attacke…8.8
• CVE-2024-33660An exploit is possible where an actor with physical access c…5.2
• CVE-2024-33661Portainer before 2.20.0 allows redirects when the target is …9.1
• CVE-2024-33662Portainer before 2.20.2 improperly uses an encryption algori…7.5
• CVE-2024-33663python-jose through 3.3.0 has algorithm confusion with OpenS…6.5
• CVE-2024-33664python-jose through 3.3.0 allows attackers to cause a denial…5.3
• CVE-2024-33665angular-translate through 2.19.1 allows XSS via a crafted ke…6.1