CVE-2020-1948 PoC — Apache Dubbo 代码问题漏洞

Source

https://github.com/L0kiii/Dubbo-deserialization

Associated Vulnerability

Title: Apache Dubbo 代码问题漏洞 (CVE-2020-1948)
Description:This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.

Description

[CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE

Readme

# Dubbo-deserialization
[CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE

Dubbo Study
Dubbo-exp
Dubbo-poc
Dubbo复现环境
...

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →