Apache bRPC 跨站脚本漏洞

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. A cross-site scripting vulnerability exists in Apache bRPC 1.6.0 and earlier versions, which stems from the application's lack of effective filtering and...

Apache bRPC Input Validation Error Vulnerability

Apache bRPC is the United States Apache Apache Foundation's industrial-grade RPC framework for building reliable and high-performance services. An input validation error vulnerability exists in Apache bRPC that stems from improper input validation in the product and can be exploited by an attacke...

CVE-2023-31039

Security vulnerability in Apache bRPC = 1.5.0, download link: https://dist.apache.org/repos/dist/release/brpc/1.5.0/ https://dist.apache.org/repos/dist/release/brpc/1.5.0/ 2. If you are using an old version of bRPC and hard to upgrade, you can apply this patch: ...

CVE-2023-31039

CVE-2023-31039 affects Apache bRPC prior to 1.5.0. The vulnerability arises from the ServerOptions::pid_file parameter, which, if influenced at startup, enables arbitrary code execution with the bRPC process permissions. Affected: brpc

CVE-2023-31039: Improper Input Validation

Security vulnerability in Apache bRPC = 1.5.0, download link: https://dist.apache.org/repos/dist/release/brpc/1.5.0/ https://dist.apache.org/repos/dist/release/brpc/1.5.0/ 2. If you are using an old version of bRPC and hard to upgrade, you can apply this patch: ...

PT-2023-23117 · Apache · Apache Brpc

Name of the Vulnerable Software and Affected Versions: Apache bRPC versions prior to 1.5.0 Description: A security issue in Apache bRPC allows attackers to execute arbitrary code via the pid file parameter in ServerOptions. This can be exploited by an attacker who can influence the pid file...

Arbitrary Code Execution in Apache BRPC

Description BRPC is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. In server.cpp there are function call to wordexp, it used for expanding path from user input. Due ...