Headline
GHSA-6x49-w35h-wqrj: Bypass serialize checks in Apache Dubbo
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4.
Users are recommended to upgrade to the latest version, which fixes the issue.
Bypass serialize checks in Apache Dubbo
High severity GitHub Reviewed Published Dec 15, 2023 to the GitHub Advisory Database • Updated Dec 15, 2023
Related news
CVE-2023-29234
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue.