Hot Topics

Apache Dubbo

Exploiting Apache Dubbo Remote Code Execution Vulnerability

Checkmarx Research: Apache Dubbo 2.7.3 – Unauthenticated RCE via Deserialization of Untrusted Data (CVE-2019-17564)

| | Apache Dubbo, Apache Software Foundation, Application Security Awareness, Application Security Vulnerabilities, Blog, Checkmarx Security Research Team, Remote Code Execution Vulnerabilities, Technical Blog
Executive Summary Having developed a high level of interest in serialization attacks in recent years, I’ve decided to put some effort into researching Apache Dubbo some months back. Dubbo, I’ve learned, deserializes ...
Blog – Checkmarx