CVE-2026-7303 | Xuxueli xxl-job up to 3.3.2 Execution Log JobLogController.java logDetailCat logId resource injection (Issue 3936)

A vulnerability was found in Xuxueli xxl-job up to 3.3.2 and classified as problematic. Impacted is the function logDetailCat of the file xxl-job-admin/src/main/java/com/xxl/job/admin/controller/biz/JobLogController.java of the component Execution Log Handler. The manipulation of the argument logId results in improper control of resource identifiers.

This vulnerability was named CVE-2026-7303. The attack may be performed from remote. In addition, an exploit is available.

It is suggested to upgrade the affected component.