What’s Vulnerable › Products

Apache Software Foundation Apache Dubbo vulnerabilities

19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Apache Software Foundation Apache Dubbo version is affected

Latest Apache Software Foundation Apache Dubbo vulnerabilities

• CVE-2023-46279 — Apache Dubbo: Bypass deny serialize list check in Apache Dubbo (CVSS 9.8)
• CVE-2023-29234 — Bypass serialize checks in Apache Dubbo (CVSS 9.8)
• CVE-2023-23638 — Apache Dubbo Deserialization Vulnerability Gadgets Bypass (CVSS 9.8)
• CVE-2021-32824 — Regular expression Denial of Service in MooTools (CVSS 9.8)
• CVE-2022-39198 — Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass (CVSS 9.8)
• CVE-2022-24969 — bypass of CVE-2021-25640 (CVSS 6.1)
• CVE-2021-43297 — Dubbo Hessian cause RCE when parse error (CVSS 9.8)
• CVE-2021-37579 — Bypass deserialization checks in Apache Dubbo (CVSS 9.8)
• CVE-2021-36161 — Unprotected input value toString cause RCE (CVSS 9.8)
• CVE-2021-36163 — Unsafe deserialization in providers using the Hessian protocol (CVSS 9.8)
• CVE-2021-36162 — Unprotected yaml deserialization cause RCE (CVSS 8.8)
• CVE-2021-30181 — Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection) (CVSS 9.8)
• CVE-2021-30180 — Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling) (CVSS 9.8)
• CVE-2021-30179 — Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter (CVSS 9.8)
• CVE-2021-25641 — Dubbo Zookeeper does not check serialization id (CVSS 9.8)
• CVE-2021-25640 — Open Redirect or SSRF vulnerability usage of parseURL (CVSS 6.1)
• CVE-2020-11995 — Apache Dubbo default deserialization protocol Hessian2 cause CRE (CVSS 9.8)
• CVE-2020-1948 — (CVSS 9.8)
• CVE-2019-17564 — (CVSS 9.8)