CVE-2025-7789
low
CVSS v3
3.7
CVSS v2
2.6
VIR risk
3.7
Description
xxl-job has Inadequate Encryption Strength
Predictions
Exploit likelihood
47%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cna@vuldb.com — https://github.com/xuxueli/xxl-job/issues/3751
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | com.xuxueli:xxl-job-admin | <3.2.0 | 3.2.0 |
| MAVEN | com.xuxueli:xxl-job-admin | <= 3.1.1 | 3.2.0 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| xuxueli | xxl-job | {"endIncluding":"3.1.1"} | |
References
- https://github.com/xuxueli/xxl-job/issues/3751
- https://vuldb.com/?ctiid.316850
- https://vuldb.com/?id.316850
- https://vuldb.com/?submit.615760
- https://nvd.nist.gov/vuln/detail/CVE-2025-7789
- https://github.com/xuxueli/xxl-job/commit/cb1bd548a6d9512aab6f1ba9c5686de62f863fcd
- https://github.com/xuxueli/xxl-job
- https://github.com/advisories/GHSA-565h-44m8-4c2v
CWEs
CWE-326 CWE-916
Verify integrity in audit chain (admin only). AS-IS.