Apache Dubbo code issue vulnerability (CNVD-2023-23551)

Apache Dubbo is a lightweight Java-based RPC (remote procedure call) framework from the Apache Foundation in the United States. The product provides interface-based remote calling, fault tolerance and load balancing, and automatic service registration and discovery.A security vulnerability exists in Apache Dubbo, which stems from insecure deserialization of serialized data received by an application from a user, and could be exploited by an attacker to cause malicious code execution.