github.com/apache/servicecomb-service-center

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

High 7.6

CVE-2023-44313

Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to u…

Apache Software Foundation Apache ServiceComb Service-Center github.com/apache/servicecomb-service-center Go

Jan 31, 2024
Medium 5.8

CVE-2023-44312

Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Apache Software Foundation Apache ServiceComb Service-Center github.com/apache/servicecomb-service-center Go

Jan 31, 2024
High 7.5

CVE-2021-21501

ServiceComb ServiceCenter Directory Traversal

Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.

Apache Software Foundation Apache ServiceComb github.com/apache/servicecomb-service-center Go

Aug 10, 2021