{"action":"Upgrade org.apache.dubbo:dubbo-parent to 2.6.10 (2.6.x) or 2.7.10 (2.7.x) or later.","affected":[{"fixed":"2.6.10","introduced":"0"},{"fixed":"2.7.10","introduced":"2.7.0"}],"component":"org.apache.dubbo:dubbo-parent","cve_ids":["CVE-2021-32824"],"ecosystem":"Maven","epss":0.03401,"exploited":false,"fixed_versions":["2.6.10","2.7.10"],"ghsa_id":"GHSA-fprr-rrm8-4534","id":"tcs_01M5N8WGW6FQ86ED77PGW4K7XD","modified_at":"2024-02-16T08:08:39.688341Z","published_at":"2023-01-03T18:30:25Z","references":["https://osv.dev/vulnerability/GHSA-fprr-rrm8-4534","https://nvd.nist.gov/vuln/detail/CVE-2021-32824","https://github.com/apache/dubbo","https://securitylab.github.com/advisories/GHSL-2021-034_043-apache-dubbo"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fprr-rrm8-4534","url":"https://osv.dev/vulnerability/GHSA-fprr-rrm8-4534"}],"summary":"Apache Dubbo vulnerable to remote code execution via Telnet Handler"}