Apache Dubbo
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_dubbo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Dubbo (6d85542a-86d4-51d3-a15a-ef24da889639) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46279 |
vulnerable | 2026-06-08 06:12:44.527087 |
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.
Users are recommended to upgrade to the latest version, which fixes the issue.
Published: 2023-12-15T08:15:56.146Z
Updated: 2025-02-13T17:14:24.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29234 |
vulnerable | 2026-06-08 06:02:39.162484 |
Bypass serialize checks in Apache Dubbo
A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4.
Users are recommended to upgrade to the latest version, which fixes the issue.
Published: 2023-12-15T08:14:47.561Z
Updated: 2025-02-13T16:49:03.349Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23638 |
vulnerable | 2026-06-08 05:56:04.136588 |
Apache Dubbo Deserialization Vulnerability Gadgets Bypass
MEDIUM (5)
A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution.
This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x version 3.1.5 and prior versions.
Published: 2023-03-08T10:48:58.574Z
Updated: 2024-10-23T16:41:29.622Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39198 |
vulnerable | 2026-06-08 05:47:18.327675 |
Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass
A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.17 and prior versions; Apache Dubbo 3.0.x version 3.0.11 and prior versions; Apache Dubbo 3.1.x version 3.1.0 and prior versions.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-13T14:48:42.604Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24969 |
vulnerable | 2026-06-08 05:41:45.015398 |
bypass of CVE-2021-25640
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.
Published: 2022-06-06T22:00:16.000Z
Updated: 2024-08-03T04:29:01.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43297 |
vulnerable | 2026-06-08 05:36:43.112933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37579 |
vulnerable | 2026-06-08 05:32:54.437063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36163 |
vulnerable | 2026-06-08 05:32:49.819389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36162 |
vulnerable | 2026-06-08 05:32:49.819031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36161 |
vulnerable | 2026-06-08 05:32:49.817896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30181 |
vulnerable | 2026-06-08 05:31:47.114155 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30180 |
vulnerable | 2026-06-08 05:31:47.113716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30179 |
vulnerable | 2026-06-08 05:31:47.112594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25641 |
vulnerable | 2026-06-08 05:30:41.140858 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25640 |
vulnerable | 2026-06-08 05:30:41.139673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11995 |
vulnerable | 2026-06-08 05:17:56.069722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.