CVE-2023-46279 | BDVDB-2026-219477 Detail

ApacheApache Dubbo

Description#

Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-502 Deserialization of Untrusted Data

References#

https://lists.apache.org/thread/zw53nxrkrfswmk9n3sfwxmcj7x030nmo
http://www.openwall.com/lists/oss-security/2023/12/15/3

Exploit#

No public exploit known

History#

Version 12023-12-15Record published in the CVE List.
Version 22025-02-13Most recent update recorded in the CVE List.