CVEvulnerability
CVE-2023-46279
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-502
Description
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.
Users are recommended to upgrade to the latest version, which fixes the issue.
Affected configurations
• apache dubbo 3.1.5
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness
References
- http://www.openwall.com/lists/oss-security/2023/12/15/3 Mailing List, Vendor Advisory
- https://lists.apache.org/thread/zw53nxrkrfswmk9n3sfwxmcj7x030nmo Mailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/12/15/3 Mailing List, Vendor Advisory
- https://lists.apache.org/thread/zw53nxrkrfswmk9n3sfwxmcj7x030nmo Mailing List, Vendor Advisory