Apache dubbo suffers from a deserialization vulnerability (CNVD-2021-49587)

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. Apache dubbo has a deserialization vulnerability that can be exploited by attackers to achieve command execution, server-side request forgery and other attacks...