CVE-2022-24969CWE-918

bypass of CVE-2021-25640

published June 6, 2022

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01836 · 78.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2022-06-06T22:00Z
EPSS history
Timeline
  • 06 JUN 22:00Z
    bypass of CVE-2021-25640
    cvelistv5