CVE-2025-9264 | Xuxueli xxl-job up to 3.1.1 Jobs JobInfoController.java remove ID resource injection (Issue 3773)

A vulnerability identified as problematic has been detected in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource identifiers.

This vulnerability is known as CVE-2025-9264. Remote exploitation of the attack is possible. Furthermore, an exploit is available.