CVE-2023-29234
15.12.2023, 09:15
A deserialization vulnerability existed when decode amalicious package.This issue affects Apache Dubbo: from 3.1.0 through 3.1.10, from 3.2.0 through 3.2.4. Users are recommended to upgrade to the latest version, which fixes the issue.Enginsight
Vendor | Product | Version |
---|---|---|
apache | dubbo | 3.1.0 ≤ 𝑥 ≤ 3.1.10 |
apache | dubbo | 3.2.0 ≤ 𝑥 ≤ 3.2.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration