Skip to content
OpenAdvisories
High · 7.5 CVE-2021-21501 EUVD-2021-2131GHSA-x6jv-5vfg-gm7x

ServiceComb ServiceCenter Directory Traversal

Published Aug 10, 2021 · Updated Aug 3, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache ServiceComb Package: github.com/apache/servicecomb-service-center Ecosystem: Go

Description

Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache ServiceComb Apache ServiceComb-Service-Center 1.x – < 2.0.0 2.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/apache/servicecomb-service-center < 2.0.0 2.0.0 GHSA-x6jv-5vfg-gm7x

References