{"id":"CVE-2022-36157","published":"2022-08-19T21:05:20Z","modified":"2024-08-03T10:00:04Z","title":"XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute…","vendor":null,"product":null,"tier":"tail","description":{"text":"XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01507,"percentile":0.74366,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/Richard-Muzi/vulnerability/issues/1","tags":["x_refsource_MISC"]}],"priority":{"score":14.9,"factors":[{"name":"EPSS percentile","points":14.87}]},"affected":[{"ecosystem":"Maven","package":"com.xuxueli:xxl-job","vulnerableRanges":["<2.4.0"],"patched":["2.4.0"],"from":["GHSA-7qq9-9g2w-56f9"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-6506","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-com-xuxueli-xxl-job-core-cve-2020-23814","parents":[{"from":"CVE-2020-23814","to":"CVE-2022-36157","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:com.xuxueli:xxl-job","fromFixed":"2.3.0","toFixed":"2.4.0","daysApart":715},{"kind":"same-code","provenance":"machine","files":["xxl-job-admin/src/main/java/com/xxl/job/admin/controller/JobGroupController.java"],"commits":["https://github.com/xuxueli/xxl-job/commit/227628567354d3c156951009d683c6fec3006e0e","https://github.com/xuxueli/xxl-job/commit/730c1066b80e8ab44503ed34ced19ef8e0471fec"],"basis":"shared function","functions":["save"]}]},{"from":"CVE-2020-29204","to":"CVE-2022-36157","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["xxl-job-admin/src/main/java/com/xxl/job/admin/controller/JobGroupController.java"],"commits":["https://github.com/xuxueli/xxl-job/commit/227628567354d3c156951009d683c6fec3006e0e","https://github.com/xuxueli/xxl-job/commit/730c1066b80e8ab44503ed34ced19ef8e0471fec"],"basis":"shared function","functions":["save"]}]}],"packageHistory":[{"cve":"CVE-2020-23814","published":"2020-09-03","fixed":"2.3.0","kev":false},{"cve":"CVE-2022-36157","published":"2022-08-19","fixed":"2.4.0","kev":false}],"package":"Maven:com.xuxueli:xxl-job"}}