Skip to content
OpenAdvisories

Vendor

apolloconfig

6 known vulnerabilities.

Products

apollo 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-32781

    Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

    Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through …

    apolloconfig apollo com.ctrip.framework.apollo:apollo Maven
  • Medium 4.3
    CVE-2024-43397

    Potential unauthorized access issue in apollo-portal

    Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary pe…

    apolloconfig apollo com.ctrip.framework.apollo:apollo Maven
  • Medium 5.7
    CVE-2023-25569

    apollo-portal has potential CSRF issue

    Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a special web page. If an authenticated portal admin visits this page, the page can silently send a request to assign new roles for that user without any con…

    apolloconfig apollo com.ctrip.framework.apollo:apollo Maven