Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-24969

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gm48-83x4-84jg

Server-side request forgery in Apache Dubbo bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.

gitlab/maven/com.alibaba/dubbo/CVE-2022-24969

Server-side request forgery in Apache Dubbo bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the allowed host check which can cause open redirect or SSRF vulnerability.

gitlab/maven/org.apache.dubbo/dubbo/CVE-2022-24969

Server-side request forgery in Apache Dubbo bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of `parseURL` method will lead to the bypass of the allowed host check which can cause open redirect or SSRF vulnerability.