Lucene search

Code injection in Apache Dubbo

🗓️ 18 Mar 2022 17:01:58Reported by GitHub Advisory DatabaseType

Apache Dubbo code injection risk in Tag Routin

Reporter	Title	Published	Views	Family All 8
Veracode	Remote Code Execution	2 Jun 202108:11	–	veracode
Prion	Cross site request forgery (csrf)	1 Jun 202114:15	–	prion
CNVD	Unspecified Vulnerability in Apache Dubbo	6 Jun 202100:00	–	cnvd
NVD	CVE-2021-30180	1 Jun 202114:15	–	nvd
CVE	CVE-2021-30180	1 Jun 202114:15	–	cve
OSV	CVE-2021-30180	1 Jun 202114:15	–	osv
OSV	Code injection in Apache Dubbo	18 Mar 202217:58	–	osv
Cvelist	CVE-2021-30180 Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)	31 May 202107:25	–	cvelist

Vulners

Node

org.apache.dubbo dubboRange2.7.0–2.7.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-30180
lists	www.lists.apache.org/thread.html/raed526465e56204030ddf374b1959478a290e7511971d7aba2e9e39b%40%3Cdev.dubbo.apache.org%3E
github	www.github.com/advisories/GHSA-7wfc-x4f7-gg2x

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Mar 2022 17:58Current

2.4Low risk

Vulners AI Score2.4

CVSS26.8

CVSS39.8

EPSS0.00421