CVE-2026-7306: Impl Xxljobserviceimpl Java Cwe 918 Cve 2026 7306

Missing validation of the user-supplied addressList business parameter against the registered base addresses for the target job group, leading to SSRF.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0

Java^β

greprules fetch cve-2026-7306-impl-xxljobserviceimpl-java-cwe-918-cve-2026-7306 --engine opengrep

Description

Missing validation of the user-supplied addressList business parameter against the registered base addresses for the target job group, leading to SSRF.

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 145 downloads
0 direct145 via packs
· 0 stars · Quality score 70How quality works
Included packs: 2 packs

Community feedback

0 signals from signed-in users.

Useful: 0
False positive: 0
Metadata: 0