Description
Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).
Users are recommended to upgrade to version 2.2.0, which fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache ServiceComb Service-Center | ≤ 2.1.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/apache/servicecomb-service-center | < 2.2.0 | 2.2.0 | GHSA-9xc9-xq7w-vpcr |
| Go | github.com/apache/servicecomb-service-center | all versions | — | GO-2024-2495 |