Apache Software Foundation Apache Dubbo

• CVE-2023-46279 Unrated Apache Dubbo: Bypass deny serialize list check in Apache Dubbo 1.7%
• CVE-2023-29234 Unrated Bypass serialize checks in Apache Dubbo 7.4%
• CVE-2023-23638 Medium 5.0 Apache Dubbo Deserialization Vulnerability Gadgets Bypass 4.9%
• CVE-2022-39198 Critical 9.8 Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass 3.3%
• CVE-2022-24969 Unrated bypass of CVE-2021-25640 1.9%
• CVE-2021-43297 Unrated Dubbo Hessian cause RCE when parse error 17.4%
• CVE-2021-37579 Unrated Bypass deserialization checks in Apache Dubbo 6.6%
• CVE-2021-36161 Unrated Unprotected input value toString cause RCE 2.5%
• CVE-2021-36163 Unrated Unsafe deserialization in providers using the Hessian protocol 3.3%
• CVE-2021-36162 Unrated Unprotected yaml deserialization cause RCE 2.3%
• CVE-2021-30180 Unrated Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling) 60.3%
• CVE-2021-30179 Unrated Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter 4.1%
• CVE-2021-25640 Unrated Open Redirect or SSRF vulnerability usage of parseURL 2.1%
• CVE-2021-30181 Unrated Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection) 60.9%
• CVE-2021-25641 Unrated Dubbo Zookeeper does not check serialization id 21.2%
• CVE-2020-11995 Unrated Apache Dubbo default deserialization protocol Hessian2 cause CRE 5.9%