Apache Dubbo code issue vulnerability (CNVD-2023-25935)

Apache Dubbo is a lightweight Java-based RPC (remote procedure call) framework from the Apache Foundation. The product provides interface-based remote calling, fault tolerance and load balancing, and automatic service registration and discovery.Apache Dubbo suffers from a code issue vulnerability that stems from vulnerability to pre-authorized remote code execution attacks via arbitrary bean operations in Telnet handlers, which can be exploited by attackers to achieve remote code execution.