{"action":"Upgrade com.xuxueli:xxl-job-admin to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"com.xuxueli:xxl-job-admin","cve_ids":["CVE-2025-9264"],"ecosystem":"Maven","epss":0.00362,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-gjx6-h8hm-c9rq","id":"tcs_01M5N8YFVJCY4MG2PNFQS9KTR7","modified_at":"2026-05-07T05:41:24.942740Z","published_at":"2025-08-21T00:30:20Z","references":["https://osv.dev/vulnerability/GHSA-gjx6-h8hm-c9rq","https://nvd.nist.gov/vuln/detail/CVE-2025-9264","https://github.com/xuxueli/xxl-job/issues/3773","https://github.com/xuxueli/xxl-job/issues/3773#issue-3308389841","https://github.com/xuxueli/xxl-job","https://vuldb.com/?ctiid.320806","https://vuldb.com/?id.320806","https://vuldb.com/?submit.631728"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-gjx6-h8hm-c9rq","url":"https://osv.dev/vulnerability/GHSA-gjx6-h8hm-c9rq"}],"summary":"xxl-job Jobs Handler remove function allows improper control of resource identifiers via ID parameter"}