Xxl-rpc Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xxl-rpc Project records in CISA KEV

No Xxl-rpc Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xxl-rpc 2 records HIGH

Records

2 records

TI-2023-16554 CVE-2023-33496 · GHSA-c29g-q3h3-mwcf

xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the…

HIGH 82

xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01042 Published 2023-06-07 No fix listed CWE-502

TI-2023-24167 CVE-2023-45146 · GHSA-f984-3wx8-grp9

Remote code execution in XXL-RPC

HIGH 76

XXL-RPC is a high performance, distributed RPC framework.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01255 Published 2023-10-18 No fix listed CWE-502

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0