CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 13.8% probability of exploitation in the next 30 days.
CVE
CVE-2020-1948
Severity
CRITICAL
CVSS
9.8
EPSS
13.84%
Original NVD Description
This vulnerability can affect all Dubbo users stay on version 2.7.6 or lower. An attacker can send RPC requests with unrecognized service name or method name along with some malicious parameter payloads. When the malicious parameter is deserialized, it will execute some malicious code. More details can be found below.
Related CVEs
Other vulnerabilities affecting the same vendor(s)