Vulnerabilities > Apache > Dubbo > 2.1.0

DATE CVE VULNERABILITY TITLE RISK
2023-01-03 CVE-2021-32824 Deserialization of Untrusted Data vulnerability in Apache Dubbo
Apache Dubbo is a java based, open source RPC framework.
network
low complexity
apache CWE-502
critical
 9.8
9.8
2022-06-09 CVE-2022-24969 Server-Side Request Forgery (SSRF) vulnerability in Apache Dubbo
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.
network
apache CWE-918
5.8
5.8