CVE-2023-46279
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Résumé
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.
Users are recommended to upgrade to the latest version, which fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com