Description
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Remediation
References
https://github.com/edirc-wong/record/blob/main/deserialization_vulnerability_report.md
Related Vulnerabilities
CVE-2019-1003000 Vulnerability in maven package org.jenkins-ci.plugins:script-security
CVE-2021-21350 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2017-16084 Vulnerability in npm package list-n-stream
CVE-2021-23411 Vulnerability in npm package anchorme
CVE-2020-7774 Vulnerability in maven package org.webjars.npm:y18n