CVE-2026-52371

Published: Ago 01, 2026 Last Modified: Ago 01, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.

https://github.com/RichardKabuto/xxl-job-ssrf-poc
https://github.com/RichardKabuto/xxl-job-ssrf-poc