Lucene search
14A9A7F7-18C3-5BDC-B809-9E95C60DD665HistoryMar 22, 2023 - 11:23 a.m.
Exploit for Deserialization of Untrusted Data in Apache Dubbo
2023-03-2211:23:44
735
exploit
deserialization
untrusted data
apache dubbo
cve-2023-23638
java 8
vm parameter
hessian
serializable
jndi injection
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
CVE-2023-23638
仅供学习研究
ZooKeeper 自备
测试环境为 Java 8, 其它版本尚未测试, …
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
hivepro
hivepro
A Deserialization Vulnerability Found in Apache Dubbo
2023-03-23 08:02:42
nvd
nvd
CVE-2023-23638
2023-03-08 11:15:10
cve
cve
CVE-2023-23638
2023-03-08 11:15:10
cnvd
cnvd
Apache Dubbo code issue vulnerability (CNVD-2023-23551)
2023-03-11 00:00:00
osv
osv
Apache Dubbo vulnerable to Deserialization of Untrusted Data
2023-03-08 12:30:16
CVE-2023-23638
2023-03-08 11:15:10
prion
prion
Deserialization of untrusted data
2023-03-08 11:15:00
cvelist
cvelist
CVE-2023-23638 Apache Dubbo Deserialization Vulnerability Gadgets Bypass
2023-03-08 10:48:58
veracode
veracode
Remote Code Execution (RCE)
2023-03-09 12:49:43
github
github
Apache Dubbo vulnerable to Deserialization of Untrusted Data
2023-03-08 12:30:16
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Dubbo
2023-05-11 07:37:52
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
Related for 14A9A7F7-18C3-5BDC-B809-9E95C60DD665