Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-39198

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5qwq-g2hx-r6f7

Hessian Lite for Apache Dubbo deserialization vulnerability A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.17 and prior versions; Apache Dubbo 3.0.x version 3.0.11 and prior versions; Apache Dubbo 3.1.x version 3.1.0 and prior versions.

gitlab/maven/com.alibaba/hessian-lite/CVE-2022-39198

Deserialization of Untrusted Data A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.17 and prior versions; Apache Dubbo 3.0.x version 3.0.11 and prior versions; Apache Dubbo 3.1.x version 3.1.0 and prior versions.

gitlab/maven/org.apache.dubbo/dubbo/CVE-2022-39198

Deserialization of Untrusted Data A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.17 and prior versions; Apache Dubbo 3.0.x version 3.0.11 and prior versions; Apache Dubbo 3.1.x version 3.1.0 and prior versions.