In Apache Dubbo prior to 2.6.9 and 2.7.10, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability.
{ "nvd_published_at": "2021-06-01T14:15:00Z", "github_reviewed_at": "2021-06-02T19:51:25Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-601", "CWE-918" ] }