CVE-2024-56180

CVE-2024-56180 describes a critical deserialization vulnerability in the Apache EventMesh project: the eventmesh-meta-raft plugin in the master branch (no release version) accepts Hessian RPC data from untrusted sources, allowing remote code execution. Affects Windows/Linux/macOS environments. Ro...