Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-40929
9.8
CRITICALCVSS v3
Published
September 28, 2022
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
GitHub