CVE-2023-33496

CriticalCVSS 9.8

Published: 07/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.04%

60th percentile - higher than 60% of all known CVEs

Summary

xxl-rpc version 1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.

Risk Assessment

This vulnerability may allow attackers to execute malicious code on the server, leading to serious security risks for the system.

Recommendation

It is recommended to update to the latest version of xxl-rpc to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.