{"action":"Upgrade com.xuxueli:xxl-job to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"0"}],"component":"com.xuxueli:xxl-job","cve_ids":["CVE-2022-36157"],"ecosystem":"Maven","epss":0.01489,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-7qq9-9g2w-56f9","id":"tcs_01M5N8K0STN5179Z64Q59AE6VS","modified_at":"2024-02-17T05:36:58.372049Z","published_at":"2022-08-20T00:00:30Z","references":["https://osv.dev/vulnerability/GHSA-7qq9-9g2w-56f9","https://nvd.nist.gov/vuln/detail/CVE-2022-36157","https://github.com/Richard-Muzi/vulnerability/issues/1","https://github.com/xuxueli/xxl-job/commit/730c1066b80e8ab44503ed34ced19ef8e0471fec","https://github.com/xuxueli/xxl-job"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-7qq9-9g2w-56f9","url":"https://osv.dev/vulnerability/GHSA-7qq9-9g2w-56f9"}],"summary":"Improper Privilege Management in com.xuxueli:xxl-job"}