← CVE Intelligence

CVE-2022-24969

bypass of CVE-2021-25640 PUBLISHED

Description (CNA)

bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Dubboaffected Apache Dubbo 2.7.x before 2.7.15; affected Apache Dubbo 2.6.x through 2.6.12

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.