Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Dubbo

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-36162

    Unprotected yaml deserialization cause RCE

    Apache Dubbo supports various rules to support configuration override or traffic routing (called routing in Dubbo). These rules are loaded into the configuration center (eg: Zookeeper, Nacos, ...) and retrieved by the customers when making a request in order …

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven