CVE-2023-48886

Published December 1st, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request.

luxiaoxun/NettyRpc

A simple RPC framework based on Netty, ZooKeeper and Spring

GitHub

2.44K