critical9.8
CVE-2023-33496
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Impact
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xxl-Rpc Project | Xxl-Rpc | through 1.7.0 |