Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Dubbo

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2023-23638 Public exploit

    Apache Dubbo Deserialization Vulnerability Gadgets Bypass

    A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x …

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven