cc.akkaha:asura-core_2.12 (0.3.0), cc.akkaha:asura-dubbo_2.12 (>=0.2.0, <=0.6.0) +258 more potentially affected by CVE-2021-30179 via com.alibaba:dubbo (>=2.5.3, <=2.6.8)

com.alibaba:dubbo MAVEN version =2.5.3, =0.2.0, =0.1.5, =0.1.5, =11.0.1-release, =11.0.1-release, =1.0, =1.0.0, =1.0.1 - cn.iisme:iisme-starter-dubbo 1.0.0 - cn.javaboot:javaboot-utils 1.0 - cn.springcloud.dubbo:spring-cloud-dubbo-core 1.0.0 and more Source cves: CVE-2021-30179 Source advisory:...

cc.akkaha:pea-dubbo_2.12 (>=0.6.0, <=0.7.0), cc.akkaha:pea_2.12 (>=0.6.0, <=0.7.0) +236 more potentially affected by CVE-2021-30179 via org.apache.dubbo:dubbo (>=2.7.0, <=2.7.9)

org.apache.dubbo:dubbo MAVEN version =2.7.0, =0.6.0, =0.6.0, =1.0.0, =1.1.1.release, =0.1.3, =1.00, =1.19 - cn.org.thinkcloud.quickstart:think-cloud-quickstart-biz-provider 1.0.1.release - cn.org.thinkcloud.quickstart:think-cloud-quickstart-ctl 1.0.1.release -...

cc.akkaha:asura-core_2.12 (0.3.0), cc.akkaha:asura-dubbo_2.12 (>=0.2.0, <=0.6.0) +258 more potentially affected by CVE-2021-30179 via com.alibaba:dubbo (>=2.5.3, <=2.6.8)

com.alibaba:dubbo MAVEN version =2.5.3, =0.2.0, =0.1.5, =0.1.5, =11.0.1-release, =11.0.1-release, =1.0, =1.0.0, =1.0.1 - cn.iisme:iisme-starter-dubbo 1.0.0 - cn.javaboot:javaboot-utils 1.0 - cn.springcloud.dubbo:spring-cloud-dubbo-core 1.0.0 and more Source cves: CVE-2021-30179 Source advisory:...

cc.akkaha:pea-dubbo_2.12 (>=0.6.0, <=0.7.0), cc.akkaha:pea_2.12 (>=0.6.0, <=0.7.0) +236 more potentially affected by CVE-2021-30179 via org.apache.dubbo:dubbo (>=2.7.0, <=2.7.9)

org.apache.dubbo:dubbo MAVEN version =2.7.0, =0.6.0, =0.6.0, =1.0.0, =1.1.1.release, =0.1.3, =1.00, =1.19 - cn.org.thinkcloud.quickstart:think-cloud-quickstart-biz-provider 1.0.1.release - cn.org.thinkcloud.quickstart:think-cloud-quickstart-ctl 1.0.1.release -...

CVE-2021-30179

creationtimestamp| type| source ---|---|--- 2021-06-26 13:48:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3699 2021-08-02 20:29:04+00:00| published-proof-of-concept| Telegram/Tvd8QL4SENBdyhrOX8ClGh5gThmxL9slOp2aXg1VdaPgg 2023-12-30 23:05:25+00:00| seen|...

CVE-2021-30179

Apache Dubbo CVE-2021-30179 affects versions prior to 2.6.9 and 2.7.9. The vulnerability arises because GenericFilter allows generic calls to arbitrary methods on provider interfaces, using Java Reflection. The invocation of $invoke/$invokeAsync uses a first argument method name, parameter types,...

cc.akkaha:pea-dubbo_2.12 (>=0.6.0, <=0.7.0), cc.akkaha:pea_2.12 (>=0.6.0, <=0.7.0) +236 more potentially affected by CVE-2021-30179 via org.apache.dubbo:dubbo (>=2.7.0, <=2.7.9)

org.apache.dubbo:dubbo MAVEN version =2.7.0, =0.6.0, =0.6.0, =1.0.0, =1.1.1.release, =0.1.3, =1.00, =1.19 - cn.org.thinkcloud.quickstart:think-cloud-quickstart-biz-provider 1.0.1.release - cn.org.thinkcloud.quickstart:think-cloud-quickstart-ctl 1.0.1.release -...

cc.akkaha:asura-core_2.12 (0.3.0), cc.akkaha:asura-dubbo_2.12 (>=0.2.0, <=0.6.0) +258 more potentially affected by CVE-2021-30179 via com.alibaba:dubbo (>=2.5.3, <=2.6.8)

com.alibaba:dubbo MAVEN version =2.5.3, =0.2.0, =0.1.5, =0.1.5, =11.0.1-release, =11.0.1-release, =1.0, =1.0.0, =1.0.1 - cn.iisme:iisme-starter-dubbo 1.0.0 - cn.javaboot:javaboot-utils 1.0 - cn.springcloud.dubbo:spring-cloud-dubbo-core 1.0.0 and more Source cves: CVE-2021-30179 Source advisory:...