288 matches found
CVE-2019-17564
CVE-2019-17564 is an unsafe deserialization vulnerability in Apache Dubbo when HTTP remoting is enabled. An attacker can send a POST with a Java object to fully compromise a Dubbo Provider instance. Affected versions include 2.7.0–2.7.4, 2.6.0–2.6.7, and all 2.5.x. The exploitation leads to remot...
Apache Dubbo Insecure Deserialization (CVE-2019-17564)
An insecure deserialization vulnerability exists in Apache Dubbo. The vulnerability is due to deserialization of untrusted data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for Deserialization of Untrusted Data in Apache Dubbo
CVE-2019-17564 FastJson + SpringFramework Gadget for Dubbo 2.7...
Unauthorized Access Vulnerability in Apache Dubbo
Apache Dubbo is Alibaba's open source service framework that allows applications to achieve high-performance RPC service output and input functions can be integrated with the Spring Framework . Apache Dubbo has an unauthorized access vulnerability that can be exploited by attackers to obtain...
Apache Dubbo Deserialization Vulnerability
Apache Dubbo is a Java-based high-performance RPC framework . Apache Dubbo has a deserialization vulnerability that can be exploited by an attacker to execute code...
PT-2020-9918 · Apache · Apache Dubbo
Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions 2.5.x Apache Dubbo versions 2.6.0 through 2.6.7 Apache Dubbo versions 2.7.0 through 2.7.4 Description: Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a PO...