| CVE-2023-46279 |
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5
|
Not rated
|
Dec 15, 2023 |
| CVE-2023-29234 |
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0…
|
Not rated
|
Dec 15, 2023 |
| CVE-2023-23638 |
A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution
|
5.0
Medium
|
Mar 8, 2023 |
| CVE-2022-39198 |
A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to…
|
Not rated
|
Oct 18, 2022 |
| CVE-2022-24969 |
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass…
|
Not rated
|
Jun 6, 2022 |
| CVE-2021-43297 |
A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to…
|
Not rated
|
Jan 10, 2022 |
| CVE-2021-37579 |
The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the…
|
Not rated
|
Sep 9, 2021 |
| CVE-2021-36161 |
Some component in Dubbo will try to print the formated string of the input arguments, which will possibly cause RCE…
|
Not rated
|
Sep 9, 2021 |
| CVE-2021-36163 |
In Apache Dubbo, users may choose to use the Hessian protocol
|
Not rated
|
Sep 7, 2021 |
| CVE-2021-36162 |
Apache Dubbo supports various rules to support configuration override or traffic routing (called routing in Dubbo)
|
Not rated
|
Sep 7, 2021 |
| CVE-2021-30180 |
Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server
|
Not rated
|
May 31, 2021 |
| CVE-2021-30179 |
Apache Dubbo prior to 2.6.9 and 2.7.9 by default supports generic calls to arbitrary methods exposed by provider…
|
Not rated
|
May 31, 2021 |
| CVE-2021-25640 |
In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which…
|
Not rated
|
May 31, 2021 |
| CVE-2021-30181 |
Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the…
|
Not rated
|
May 29, 2021 |
| CVE-2021-25641 |
Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on
|
Not rated
|
May 29, 2021 |
| CVE-2020-11995 |
A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code…
|
Not rated
|
Jan 11, 2021 |