Skip to content
OpenAdvisories

Package · Maven

com.alipay.sofa:rpc-sofa-boot-starter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-23636

    SOFARPC Remote Command Execution(RCE) Vulnerbility

    SOFARPC is a Java RPC framework. SOFARPC defaults to using the SOFA Hessian protocol to deserialize received data, while the SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection.…

    sofastack sofa-rpc com.alipay.sofa:rpc-sofa-boot-starter Maven