2 matches found
GHSA-GM48-83X4-84JG Server-side request forgery in Apache Dubbo
bypass CVE-2021-25640 In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability...
6.1CVSS6.4AI score0.02073EPSS
SaveExploits0References4
GHSA-GW4J-4229-Q4PX Server-Side Request Forgery in Apache Dubbo
In Apache Dubbo prior to 2.6.9 and 2.7.10, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability...
6.1CVSS6.3AI score0.02073EPSS
SaveExploits0References3
20