Back to search
CVE-2022-24969
Published: Jun 6, 2022
Modified: Aug 3, 2024
PUBLISHED
Description
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.
| Vendor | Product | Versions |
|---|---|---|
Apache Software Foundation | Apache Dubbo | affected Apache Dubbo 2.7.x - < 2.7.15affected Apache Dubbo 2.6.x - <= 2.6.12 |
Weaknesses (CWE)
References
https://lists.apache.org/thread/1xbckc3467wfk5r7n2o44r2brdsbwxgr
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now