CVE-2024-23636
1 advisory.
Maven/com.alipay.sofa:rpc-sofa-boot-starter CVE-2024-23636: critical 9.8
Remote Command Execution in SOFARPC
Action: Upgrade com.alipay.sofa:rpc-sofa-boot-starter to 5.12.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.0 | - |
Fixed versions
| 5.12.0 |
Sources
- osv: GHSA-7q8p-9953-pxvr
- https://github.com/sofastack/sofa-rpc/security/advisories/GHSA-7q8p-9953-pxvr
- https://nvd.nist.gov/vuln/detail/CVE-2024-23636
- https://github.com/sofastack/sofa-rpc/commit/42d19b1b1d14a25aafd9ef7c219c04a19f90fc76
- https://github.com/sofastack/sofa-rpc/commit/d08e25824ae9feaf0876adba9acd2938f34759b1
- https://github.com/sofastack/sofa-rpc
CVE-2024-23636 · published · modified · JSON