Vulnerability

CVE-2021-43297: APACHE Dubbo Remote Code Execution Vulnerability Alert

On January 10, Apache issued a security notice to fix a remote code execution vulnerability (CVE-2021-43297) in Dubbo. Due to a deserialization vulnerability in Dubbo’s hessian-lite, an unauthenticated attacker could exploit the vulnerability to...