Approved changes feed: RSS · Atom
cpe:2.3:a:xxl-rpc_project:xxl-rpc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xxl Rpc Project (34cbe79a-599e-5278-bf74-6e69687118b9) |
|---|---|
| Product | Xxl Rpc (20b021a4-79a7-514f-99a3-39757d0def70) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/xuxueli/xxl-rpc |
purl2cpe | 2026-06-01 10:16:15.652263 |
pkg:maven/com.xuxueli/xxl-rpc |
purl2cpe | 2026-06-01 10:16:15.652265 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45146 |
vulnerable | 2026-06-08 06:12:42.053738 |
Remote code execution in XXL-RPC
CRITICAL (9.1)
XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized objects that, once deserialized, force it to execute arbitrary code. This can be abused to take control of the machine the server is running by way of remote code execution. This issue has not been fixed.
Published: 2023-10-18T21:56:55.614Z
Updated: 2024-08-29T17:09:23.119Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33496 |
vulnerable | 2026-06-08 06:06:23.219418 |
Details available
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-01-07T15:58:43.279Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.