Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary constructors.
References
Link | Resource |
---|---|
https://lists.apache.org/thread.html/raed526465e56204030ddf374b1959478a290e7511971d7aba2e9e39b%40%3Cdev.dubbo.apache.org%3E | Mailing List Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2021-05-31T07:25:14
Updated: 2021-05-31T07:25:14
Reserved: 2021-04-07T00:00:00
Link: CVE-2021-30180
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-06-01T14:15:09.937
Modified: 2021-06-10T16:08:48.237
Link: CVE-2021-30180
JSON object: View
Redhat Information
No data.
CWE