Vulnerability Details CVE-2024-3366
A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This vulnerability affects the function deserialize of the file com/xxl/job/core/util/JdkSerializeTool.java of the component Template Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259480.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.8%
CVSS Severity
CVSS v3 Score 3.5
CVSS v2 Score 2.7
References
Products affected by CVE-2024-3366
-
cpe:2.3:a:xuxueli:xxl-job:1.0.0.0
-
cpe:2.3:a:xuxueli:xxl-job:1.2.0
-
cpe:2.3:a:xuxueli:xxl-job:1.3.0
-
cpe:2.3:a:xuxueli:xxl-job:1.3.1
-
cpe:2.3:a:xuxueli:xxl-job:1.3.2
-
cpe:2.3:a:xuxueli:xxl-job:1.4.0
-
cpe:2.3:a:xuxueli:xxl-job:1.4.2
-
cpe:2.3:a:xuxueli:xxl-job:1.5.0
-
cpe:2.3:a:xuxueli:xxl-job:1.5.1
-
cpe:2.3:a:xuxueli:xxl-job:1.5.2
-
cpe:2.3:a:xuxueli:xxl-job:1.6.0
-
cpe:2.3:a:xuxueli:xxl-job:1.6.2
-
cpe:2.3:a:xuxueli:xxl-job:1.7.0
-
cpe:2.3:a:xuxueli:xxl-job:1.7.1
-
cpe:2.3:a:xuxueli:xxl-job:1.7.2
-
cpe:2.3:a:xuxueli:xxl-job:1.8.0
-
cpe:2.3:a:xuxueli:xxl-job:1.8.1
-
cpe:2.3:a:xuxueli:xxl-job:1.8.2
-
cpe:2.3:a:xuxueli:xxl-job:1.9.0
-
cpe:2.3:a:xuxueli:xxl-job:1.9.1
-
cpe:2.3:a:xuxueli:xxl-job:1.9.2
-
cpe:2.3:a:xuxueli:xxl-job:2.0.0
-
cpe:2.3:a:xuxueli:xxl-job:2.0.1
-
cpe:2.3:a:xuxueli:xxl-job:2.0.2
-
cpe:2.3:a:xuxueli:xxl-job:2.1.0
-
cpe:2.3:a:xuxueli:xxl-job:2.1.1
-
cpe:2.3:a:xuxueli:xxl-job:2.1.2
-
cpe:2.3:a:xuxueli:xxl-job:2.2.0
-
cpe:2.3:a:xuxueli:xxl-job:2.3.0
-
cpe:2.3:a:xuxueli:xxl-job:2.3.1
-
cpe:2.3:a:xuxueli:xxl-job:2.4.0
-
cpe:2.3:a:xuxueli:xxl-job:2.4.1