xxl-rpc vulnerabilities
1 known vulnerability in xxl-rpc from Xuexueli. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
xxl-rpc: Deserialization of Untrusted Data
XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malic