Количество 2
Количество 2
CVE-2020-1948
This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
GHSA-whww-v56c-cgv2
Deserialization of Untrusted Data in Apache Dubbo
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-1948 This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below. | CVSS3: 9.8 | 64% Средний | больше 5 лет назад |
| GHSA-whww-v56c-cgv2 Deserialization of Untrusted Data in Apache Dubbo | CVSS3: 9.8 | 64% Средний | почти 4 года назад |
Уязвимостей на страницу