Lucene search
HistoryJun 07, 2023 - 9:15 p.m.
CVE-2023-33496
xxl-rpc v1.7.0
deserialization vulnerability
nettydecode#decode
component
com.xxl.rpc.core.remoting.net.impl.netty.codec
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.1%
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Affected configurations
Node
xxl-rpc_projectxxl-rpcRange≤1.7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xxl-rpc_project | xxl-rpc | * | cpe:2.3:a:xxl-rpc_project:xxl-rpc:*:*:*:*:*:*:*:* |
Related
osv
osv
xxl-rpc deserialization vulnerability
2023-06-07 21:30:18
CVE-2023-33496
2023-06-07 21:15:13
veracode
veracode
Remote Code Execution (RCE)
2023-06-20 05:14:56
cve
cve
CVE-2023-33496
2023-06-07 21:15:13
github
github
xxl-rpc deserialization vulnerability
2023-06-07 21:30:18
prion
prion
Deserialization of untrusted data
2023-06-07 21:15:00
cvelist
cvelist
CVE-2023-33496
2023-06-07 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.1%
Related for NVD:CVE-2023-33496