CVE-2021-36162 Unprotected yaml deserialization cause RCE

Apache Dubbo supports various rules to support configuration override or traffic routing called routing in Dubbo. These rules are loaded into the configuration center eg: Zookeeper, Nacos, ... and retrieved by the customers when making a request in order to find the right endpoint. When parsing...

Apache Dubbo 代码问题漏洞

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. It provides interface-based remote calling, fault tolerance and load balancing, and automated service registration and discovery. A security vulnerability exists in Apache...

CVE-2021-36162: Undefined Security Weakness

Apache Dubbo supports various rules to support configuration override or traffic routing called routing in Dubbo. These rules are loaded into the configuration center eg: Zookeeper, Nacos, ... and retrieved by the customers when making a request in order to find the right endpoint. When parsing...

Unauthorized Access Vulnerability in EDAS Configuration Center of AliCloud Computing Ltd.

AliCloud Computing Ltd. is a cloud computing and artificial intelligence technology company dedicated to providing secure and reliable computing and data processing capabilities as an online public service to make computing and artificial intelligence a pervasive technology. An unauthorized acces...

Unauthorized Access Vulnerability in E3 Omni-Channel Configuration Center of Shanghai Esaote Software Co.

Shanghai Esaote Software Co., Ltd. is an omni-channel digital retail solution service provider, providing operation consulting and digital intelligence solutions for the retail industry, covering the fields of enterprise middleware, data middleware, digital retailing, e-commerce, mobile...

Code Execution Vulnerability in Apollo at Shanghai Ctrip Business Co.

Apollo Apollo is a distributed configuration center developed by Ctrip's framework department. A code execution vulnerability exists in Apollo in Shanghai Ctrip Business Co. Ltd. that can be exploited by an attacker to execute arbitrary commands...