CVE:CVE-2023-39017
CNNVD:CNNVD-202307-2214
Terracotta Quartz Scheduler是一款开源的作业调度框架。
Terracotta Quartz Scheduler 2.3.2及之前版本存在安全漏洞，该漏洞源于在组件org.quartz.jobs.ee.jms.SendQueueMessageJob.execute中存在代码注入漏洞。
solution:Upgrade softwareag quartz to a higher version than 2.3.2,and avoid the version (,2.3.2]