com.alipay.sofa:sofa-boot-jacoco-report (3.19.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.19.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.19.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.25.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.25.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.25.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.21.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.21.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.21.0 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.18.1) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.18.1)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.18.1 Source cves: CVE-2024-23636 Source...

com.alipay.sofa:sofa-boot-jacoco-report (3.23.0) potentially affected by CVE-2024-23636 via com.alipay.sofa:rpc-sofa-boot-starter (3.23.0)

com.alipay.sofa:rpc-sofa-boot-starter MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa:rpc-sofa-boot-starter and may be impacted: - com.alipay.sofa:sofa-boot-jacoco-report 3.23.0 Source cves: CVE-2024-23636 Source...

CVE-2024-23636

creationtimestamp| type| source ---|---|--- 2024-01-23 19:26:51+00:00| seen| https://t.me/ctinow/172252...

CVE-2024-23636 SOFARPC Remote Command Execution(RCE) Vulnerbility

SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But, prior to version 5.12.0, there i...