Skip to content
OpenAdvisories

Package · Maven

org.apache.dubbo:dubbo-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1948 Public exploit EPSS 16%

    Deserialization of Untrusted Data in Apache Dubbo

    This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will e…

    org.apache.dubbo:dubbo org.apache.dubbo:dubbo-common Maven