CVE-2023-33496
1 advisory.
Maven/com.xuxueli:xxl-rpc-core CVE-2023-33496: critical 9.8
xxl-rpc deserialization vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.7.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-c29g-q3h3-mwcf
- https://nvd.nist.gov/vuln/detail/CVE-2023-33496
- https://github.com/edirc-wong/record/blob/main/deserialization_vulnerability_report.md
- https://github.com/xuxueli/xxl-rpc
CVE-2023-33496 · published · modified · JSON