CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache. Its EPSS score suggests a 60.4% probability of exploitation in the next 30 days.
CVE
CVE-2021-30180
Severity
CRITICAL
CVSS
9.8
EPSS
60.43%
Apache
Original NVD Description
Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary constructors.
Related CVEs
Other vulnerabilities affecting the same vendor(s)