CVE-2020-1948
2 advisories.
Maven/org.apache.dubbo:dubbo CVE-2020-1948: critical 9.8, EPSS 16.44%
Deserialization of Untrusted Data in Apache Dubbo
Action: Upgrade org.apache.dubbo:dubbo to 2.7.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.7 | - |
Fixed versions
| 2.7.7 |
Sources
- osv: GHSA-whww-v56c-cgv2
- https://nvd.nist.gov/vuln/detail/CVE-2020-1948
- https://lists.apache.org/thread.html/rbaa41711b3e7a8cd20e9013737423ddd079ddc12f90180f86e76523c%40%3Csecurity.dubbo.apache.org%3E
- https://nsfocusglobal.com/apache-dubbo-remote-code-execution-vulnerability-cve-2020-1948-threat-alert
CVE-2020-1948 · published · modified · JSON
Maven/org.apache.dubbo:dubbo-common CVE-2020-1948: critical 9.8, EPSS 16.44%
Deserialization of Untrusted Data in Apache Dubbo
Action: Upgrade org.apache.dubbo:dubbo-common to 2.7.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.7 | - |
Fixed versions
| 2.7.7 |
Sources
- osv: GHSA-whww-v56c-cgv2#Maven/org.apache.dubbo:dubbo-common
- https://nvd.nist.gov/vuln/detail/CVE-2020-1948
- https://lists.apache.org/thread.html/rbaa41711b3e7a8cd20e9013737423ddd079ddc12f90180f86e76523c%40%3Csecurity.dubbo.apache.org%3E
- https://nsfocusglobal.com/apache-dubbo-remote-code-execution-vulnerability-cve-2020-1948-threat-alert
CVE-2020-1948 · published · modified · JSON