Cxc

A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. The issue is related to the mechanism of deserialization in the Apache Dubbo RPC framework, allowing a remote attacker to execute arbitrary code.

A deserialization vulnerability existed in dubbo hessian-lite, which could lead to malicious code execution.

A deserialization vulnerability existed in dubbo hessian-lite, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol. During Hessian, catching unexpected exceptions will log out some information for users, which may cause remote command execution.