com.alibaba:dubbo vulnerabilities (Maven)

5 vulnerabilities.

• com.alibaba:dubbo Maven bypass of CVE-2021-25640 CVE-2022-24969 Fix available 6.1 MediumJune 6, 2022
• com.alibaba:dubbo Maven Apache Dubbo Pre-auth RCE via Java deserialization in the Generic filter CVE-2021-30179 Fix available 9.8 CriticalMay 31, 2021
• com.alibaba:dubbo Maven Open Redirect or SSRF vulnerability usage of parseURL CVE-2021-25640 Fix available 6.1 MediumMay 31, 2021
• com.alibaba:dubbo Maven Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection) CVE-2021-30181 Public exploitFix available EPSS 60.9% 9.8 CriticalMay 29, 2021
• com.alibaba:dubbo Maven Dubbo Zookeeper does not check serialization id CVE-2021-25641 Public exploitFix available EPSS 21.2% 9.8 CriticalMay 29, 2021