{"action":"Upgrade com.xuxueli:xxl-job-core to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"0"}],"component":"com.xuxueli:xxl-job-core","cve_ids":["CVE-2022-43183"],"ecosystem":"Maven","epss":0.01787,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-83w4-x5w9-hf4h","id":"tcs_01M5N8KPC8RPXKFYP2C8R7AJYC","modified_at":"2025-07-18T19:10:49.016165Z","published_at":"2022-11-17T21:30:49Z","references":["https://osv.dev/vulnerability/GHSA-83w4-x5w9-hf4h","https://nvd.nist.gov/vuln/detail/CVE-2022-43183","https://github.com/xuxueli/xxl-job/issues/3002","https://github.com/xuxueli/xxl-job/commit/9293c61ca0a8d54afdfb27cc568885ae639a14dc","https://github.com/xuxueli/xxl-job","https://github.com/xuxueli/xxl-job/releases/tag/2.3.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-83w4-x5w9-hf4h","url":"https://osv.dev/vulnerability/GHSA-83w4-x5w9-hf4h"}],"summary":"XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)"}