Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-49587
HistoryJun 30, 2021 - 12:00 a.m.

Apache dubbo is vulnerable to deserialization (CNVD-2021-49587)

2021-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

Apache Dubbo is a lightweight Java-based RPC (remote procedure call) framework from the Apache Foundation. Apache dubbo has a deserialization vulnerability that could be exploited by attackers to achieve command execution, server-side request forgery, and other attacks.