{"action":"Upgrade com.xuxueli:xxl-job-core to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"0"}],"component":"com.xuxueli:xxl-job-core","cve_ids":["CVE-2024-42681"],"ecosystem":"Maven","epss":0.00886,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-cpfp-m5qw-c4r3","id":"tcs_01M5N8SXCCA8GNCZC1Q6F23762","modified_at":"2025-05-22T20:19:54.211888Z","published_at":"2024-08-15T18:31:51Z","references":["https://osv.dev/vulnerability/GHSA-cpfp-m5qw-c4r3","https://nvd.nist.gov/vuln/detail/CVE-2024-42681","https://github.com/xuxueli/xxl-job/issues/3516","https://github.com/xuxueli/xxl-job/commit/a2dc9011310628f3e18c3a5095e7e6a946d017bd","https://github.com/xuxueli/xxl-job"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-cpfp-m5qw-c4r3","url":"https://osv.dev/vulnerability/GHSA-cpfp-m5qw-c4r3"}],"summary":"Improper Preservation of Permissions in xxl-job"}