Apache · Apache Dubbo · CVE-2021-36161
**Name of the Vulnerable Software and Affected Versions**
Apache Dubbo versions prior to 2.7.13
**Description**
A potential issue exists where some component in Dubbo attempts to print the formatted string of input arguments. This could lead to remote code execution (RCE) if a maliciously customized bean with a special `toString` method is used.
**Recommendations**
For versions prior to 2.7.13, update to Apache Dubbo 2.7.13 to resolve the issue.