6 matches found
CVE-2023-29234
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue...
Exploit for Deserialization of Untrusted Data in Apache Dubbo
Apache ActiveMQ远程命令执行漏洞 影响版本: 5.18.0=Apache ActiveMQ5.18.3, 5.17.0=Apache ActiveMQ5.17.6, 5.16.0=Apache ActiveMQ5.16.7, 5.15.0=Apache ActiveMQ5.15.15 利用方式: 利用ActiveMQ的反序列化漏洞,可以执行任意命令 漏洞回显复现: 漏洞脚本: https://github.com/Fw-fW-fw/activemqThrowable, https://github.com/sincere9/Apache-ActiveMQ-RCE Apach...
cc.uncarbon.framework:helio-starter-dubbo (>=1.7.0 <=1.11.1), io.basc.framework:dubbo (>=1.8.0 <=1.8.1) +15 more potentially affected by CVE-2023-29234 via org.apache.dubbo:dubbo (>=3.1.0 <=3.1.10)
org.apache.dubbo:dubbo MAVEN version =3.1.0, =1.7.0, =1.8.0, =0.0.1.RC1, =0.0.1.RC1, =2022.10, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =2.5.1, =1.0.7, =1.0.15.1 and more Source cves: CVE-2023-29234 Source advisory: OSV:GHSA-6X49-W35H-WQRJ...
cc.uncarbon.framework:helio-starter-dubbo (>=2.0.0 <=2.2.0), cn.dev33:sa-token-dubbo3 (>=1.35.0.RC <=1.45.0) +52 more potentially affected by CVE-2023-29234 via org.apache.dubbo:dubbo (>=3.2.0 <=3.2.4)
org.apache.dubbo:dubbo MAVEN version =3.2.0, =2.0.0, =1.35.0.RC, =2023.0.0.0, =2023.0.0.0-beta2, =4.0.5, =4.0.5, =1.2.0, =1.0.0, =1.0.0, =1.0.0, =3.0.2, =3.0.6 - com.mobaijun:loadbalancer-spring-boot-starter =3.0.2 - com.mobaijun:test-spring-boot-starter-example =3.0.3 -...
CVE-2023-29234
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue...
CVE-2023-29234 Bypass serialize checks in Apache Dubbo
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue...