Skip to content
OpenAdvisories
Medium · 5.8 CVE-2023-44312 EUVD-2024-0415GHSA-r8xp-52mq-rmm8GO-2024-2496

Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server

Published Jan 31, 2024 · Updated May 30, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache ServiceComb Service-Center Package: github.com/apache/servicecomb-service-center Ecosystem: Go

Description

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects

Apache ServiceComb Service-Center

before 2.1.0 (include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache ServiceComb Service-Center ≤ 2.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/apache/servicecomb-service-center < 2.2.0 2.2.0 GHSA-r8xp-52mq-rmm8
Go github.com/apache/servicecomb-service-center all versions — GO-2024-2496

References