Apache Dubbo Deserialization Vulnerability

Apache Dubbo is a Java-based high-performance RPC framework . Apache Dubbo has a deserialization vulnerability that can be exploited by an attacker to execute code...

PT-2020-9918 · Apache · Apache Dubbo

Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions 2.5.x Apache Dubbo versions 2.6.0 through 2.6.7 Apache Dubbo versions 2.7.0 through 2.7.4 Description: Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a PO...

CVE-2023-24596

This CVE ID is rejected as unused by its CNA and does not represent an active vulnerability entry.

CVE-2023-45216

This CVE ID has been rejected by its CNA as unused and does not represent an active vulnerability entry.

CVE-2023-45216

...

CVE-2023-24596

...