Tracker / CVE-2020-1948
CVE-2020-1948
Critical 9.8
This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
Affected products and versions
| apache | dubbo · 2.5.0 → 2.5.10 |
|---|---|
| apache | dubbo · 2.6.0 → 2.6.7 |
| apache | dubbo · 2.7.0 → 2.7.6 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.