CVE-2023-46279
Assigner: apache
Published: 2023-12-15T08:15:56.146Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Dubbo
vendor: Apache Software Foundation
versions: status: affected
version: 3.1.5
descriptions: supportingMedia: base64: no
type: text/html
value: Deserialization of Untrusted Data vulnerability in Apache Dubbo.<p>This issue only affects Apache Dubbo 3.1.5.</p><p>Users are recommended to upgrade to the latest version, which fixes the issue.</p>
value: Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.

Users are recommended to upgrade to the latest version, which fixes the issue.


metrics: other: content: text: important
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-502
description: CWE-502 Deserialization of Untrusted Data
type: CWE
source: discovery: UNKNOWN
title: Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
x_generator: engine: Vulnogram 0.1.0-dev