Skip to content
OpenAdvisories

Package · Maven

com.ctrip.framework.apollo:apollo-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.0
    CVE-2020-15170

    Missing access control in apollo-adminservice

    apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internet(which is not recommended), there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn'…

    ctripcorp apollo com.ctrip.framework.apollo:apollo-core Maven