Description
In CVE-2021-30179, the Apache Dubbo Generic filter has poor filtering. Attackers can construct malicious requests and call malicious methods to cause remote code execution.
Apache Dubbo Generic filter 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://help.aliyun.com/zh/edas/product-overview/apache-dubbo-security-vulnerability-cve-2021-30179-rce-vulnerability-in-genericfilter
https://whoopsunix.com/docs/components/Dubbo/CVE-2021-30179/
https://www.cnblogs.com/suyu7/p/14928710.html
https://kuron3k0.github.io/2021/06/04/dubbo-genericfilter-rce/
https://securitylab.github.com/advisories/GHSL-2021-034_043-apache-dubbo/
https://lists.apache.org/thread/980x0wb42tghghwmskpcm47fc77936pp
https://github.blog/security/vulnerability-research/apache-dubbo-all-roads-lead-to-rce/
https://nvd.nist.gov/vuln/detail/CVE-2021-30179
https://avd.aliyun.com/detail?id=AVD-2021-30179
https://threedr3am.github.io/2021/06/01/CVE-2021-30179%20-%20Dubbo%20Pre-auth%20RCE%20via%20Java%20deserialization%20in%20the%20Generic%20filter/