CVE-2023-29234 (published 2023-12-15T08:14:47.561Z)
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4.

Users are recommended to upgrade to the latest version, which fixes the issue.


Affected products: Vendor: Apache Software Foundation
Product: Apache Dubbo
Versions: 3.1.0, 3.2.0