Skip to content
OpenAdvisories

Package · Maven

org.apache.dubbo:dubbo-parent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2021-32824

    Regular expression Denial of Service in MooTools

    Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Han…

    Apache Dubbo org.apache.dubbo:dubbo-parent Maven
  • Critical 9.8
    CVE-2020-11995

    Apache Dubbo default deserialization protocol Hessian2 cause CRE

    A deserialization vulnerability existed in dubbo 2.7.5 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protool, during Hessian2 deserializing the HashMap object…

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo-parent Maven