by Kastro
Paper/Archive/CVE-2021-30181

CVE-2021-30181

Apache Software Foundation Apache Dubbo — Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)

EPSS 61%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.2.992 × 2019.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these rules, Dubbo customers use ScriptEngine and run the rule provided by the script which by default may enable executing arbitrary code.

Affected

ProductAffectedFixed inSource
Apache DubboApache Dubbo 2.7.x – < 2.7.92.7.9CNA
Apache DubboApache Dubbo 2.6.x – < 2.6.92.6.9CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reflists.apache.org/thread.html/re22410dc704a09bc7032ddf15140cf5e7df3e8ece390fc9032ff5587%40%3Cdev.dubbo.apache.org%3E