CVE-2023-46279

—

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

Dec 15, 2023 (Dec 15, 2023)

Modified

Jun 17, 2026

Description

Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue.

Vendors: apache
Products: dubbo
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.