A vulnerability was found in xxl-job 3.4.0. It has been rated as critical. This issue affects some unknown processing of the file /jobinfo/trigger. This manipulation causes server-side request forgery.
This vulnerability is tracked as CVE-2026-52371. The attack is possible to be carried out remotely. No exploit exists.
