From ac22e45bed3bb7553294ed21a3f405b1c165dc97 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Thu, 9 Sep 2021 08:00:59 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2021/36xxx/CVE-2021-36161.json | 7 ++++--- 2021/37xxx/CVE-2021-37579.json | 9 +++++---- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/2021/36xxx/CVE-2021-36161.json b/2021/36xxx/CVE-2021-36161.json index 65065ed10aa..36ab51d479a 100644 --- a/2021/36xxx/CVE-2021-36161.json +++ b/2021/36xxx/CVE-2021-36161.json @@ -62,12 +62,13 @@ "references": { "reference_data": [ { - "refsource": "CONFIRM", - "url": "https://lists.apache.org/thread.html/r40212261fd5d638074b65f22ac73eebe93ace310c79d4cfcca4863da%40%3Cdev.dubbo.apache.org%3E" + "refsource": "MISC", + "url": "https://lists.apache.org/thread.html/r40212261fd5d638074b65f22ac73eebe93ace310c79d4cfcca4863da%40%3Cdev.dubbo.apache.org%3E", + "name": "https://lists.apache.org/thread.html/r40212261fd5d638074b65f22ac73eebe93ace310c79d4cfcca4863da%40%3Cdev.dubbo.apache.org%3E" } ] }, "source": { "discovery": "UNKNOWN" } -} +} \ No newline at end of file diff --git a/2021/37xxx/CVE-2021-37579.json b/2021/37xxx/CVE-2021-37579.json index d9f04f3a5a7..cf8404d4af6 100644 --- a/2021/37xxx/CVE-2021-37579.json +++ b/2021/37xxx/CVE-2021-37579.json @@ -42,7 +42,7 @@ "description_data": [ { "lang": "eng", - "value": "The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can use to skip the security check (when enabled) and reaching a deserialization operation with native java serialization.\n\nApache Dubbo 2.7.13, 3.0.2 fixed this issue by quickly fail when any unrecognized request was found." + "value": "The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can use to skip the security check (when enabled) and reaching a deserialization operation with native java serialization. Apache Dubbo 2.7.13, 3.0.2 fixed this issue by quickly fail when any unrecognized request was found." } ] }, @@ -67,12 +67,13 @@ "references": { "reference_data": [ { - "refsource": "CONFIRM", - "url": "https://lists.apache.org/thread.html/r898afa109cdbb4b79724308648ff0718152ebe1d3d6dfc7202d958bc%40%3Cdev.dubbo.apache.org%3E" + "refsource": "MISC", + "url": "https://lists.apache.org/thread.html/r898afa109cdbb4b79724308648ff0718152ebe1d3d6dfc7202d958bc%40%3Cdev.dubbo.apache.org%3E", + "name": "https://lists.apache.org/thread.html/r898afa109cdbb4b79724308648ff0718152ebe1d3d6dfc7202d958bc%40%3Cdev.dubbo.apache.org%3E" } ] }, "source": { "discovery": "UNKNOWN" } -} +} \ No newline at end of file