CVE-2023-33779

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p59

Published

May 26, 2023 (May 26, 2023)

Modified

Jul 9, 2026

Description

A lateral privilege escalation vulnerability in XXL-Job v2.4.1 allows users to execute arbitrary commands on another user's account via a crafted POST request to the component /jobinfo/.

Vendors: xuxueli
Products: xxl-job
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.