longofo/Apache-Dubbo-Hessian2-CVE-2021-43297

PoC

Apache Dubbo Hessian2 CVE-2021-43297 demo

view exploit source poc_in_githubauthor longofopublished 2022-01-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-43297US	critical9.8	16.5% (97th)	Exploit	2022-01-10
A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the de…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.