Количество 2
Количество 2
CVE-2021-30180
Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary constructors.
GHSA-7wfc-x4f7-gg2x
Code injection in Apache Dubbo
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-30180 Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary constructors. | CVSS3: 9.8 | 4% Низкий | больше 4 лет назад | |
GHSA-7wfc-x4f7-gg2x Code injection in Apache Dubbo | CVSS3: 9.8 | 4% Низкий | почти 4 года назад |
Уязвимостей на страницу