CVE-2021-25640CWE-918

Open Redirect or SSRF vulnerability usage of parseURL

published May 31, 2021

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02073 · 81.3th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2021-05-31T07:25Z
EPSS history
Timeline
  • 31 MAY 07:25Z
    Open Redirect or SSRF vulnerability usage of parseURL
    cvelistv5