Junglewise Threat Intelligence

CVE-2021-25640: Server-Side Request Forgery in Apache Dubbo

CVE-2021-25640 · Severity: low · CVSS 3.1 · Published 2022-03-18

Technologies: org.apache.dubbo:dubbo (Maven), com.alibaba:dubbo (Maven). Vendors: Maven.

Executive brief

Server-Side Request Forgery in Apache Dubbo

Affected products

  • Maven org.apache.dubbo:dubbo
  • Maven com.alibaba:dubbo

Related threats