A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function
httpJobHandler of the file srcmainjavacomxxljobexecutorservicejobhandlerSampleXxlJob.java. The manipulation leads to server-side request forgery.
This vulnerability is traded as CVE-2025-7787. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
