Approved changes feed: RSS · Atom
cpe:2.3:a:xuexueli:xxl-rpc:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xuexueli (4f4de0be-0d1a-530a-a48e-23e7d0c2ab34) |
|---|---|
| Product | Xxl Rpc (8be2f4fd-841b-5eec-88e3-023fbc8dbeba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45146 |
vulnerable | 2026-06-08 06:12:42.052769 |
Remote code execution in XXL-RPC
CRITICAL (9.1)
XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized objects that, once deserialized, force it to execute arbitrary code. This can be abused to take control of the machine the server is running by way of remote code execution. This issue has not been fixed.
Published: 2023-10-18T21:56:55.614Z
Updated: 2024-08-29T17:09:23.119Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.