CVE-2023-29234: Bypass serialize checks in Apache Dubbo

                Severity: moderate

Affected versions:

- Apache Dubbo 3.1.0 through 3.1.10
- Apache Dubbo 3.2.0 through 3.2.4

Description:

A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 
through 3.1.10, from 3.2.0 through 3.2.4.

Users are recommended to upgrade to the latest version, which fixes the issue.

Credit:

Bofei Chen, Lei Zhang, Guangliang Yang, Keke Lian and Xinyou Huang (finder)

References:

https://dubbo.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-29234