title: Open Redirect or SSRF vulnerability usage of parseURL
description: In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulnerability.
problem types: CWE-918 Server-Side Request Forgery (SSRF)
affected:
{
product: Apache Dubbo
vendor: Apache Software Foundation
versions:
lessThan: 2.7.9, status: affected, version: Apache Dubbo 2.7.x, versionType: custom
lessThan: 2.6.9, status: affected, version: Apache Dubbo 2.6.x, versionType: custom
}