A deserialization vulnerability existed in dubbo hessian-lite, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol. During Hessian, catching unexpected exceptions will log out some information for users, which may cause remote command execution.