VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 21, 2023· Updated Jun 17, 2026

CVE-2023-27087

CVE-2023-27087

Description

Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
com.xuxueli:xxl-jobMaven
>= 2.2.0, <= 2.3.1—

Affected products

5
  • Xuxueli/Xxl Job4 versions
    cpe:2.3:a:xuxueli:xxl-job:2.2.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:xuxueli:xxl-job:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:xuxueli:xxl-job:2.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:xuxueli:xxl-job:2.3.1:*:*:*:*:*:*:*
    • (no CPE)
  • ghsa-coords
    pkg:maven/com.xuxueli/xxl-job
    Range: >= 2.2.0, <= 2.3.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.