CVE-2022-24969
bypass of CVE-2021-25640
Résumé
bypass of CVE-2021-25640
Description d'origine
La description telle que publiée par la source (souvent en anglais).
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org