Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-44312 · ADVISORY
• apache/servicecomb-service-center · PACKAGE
• lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s · WEB
• openwall.com/lists/oss-security/2024/01/31/5 · WEB
• GitHub Advisory GHSA-r8xp-52mq-rmm8 · ADVISORY

github.com/apache/servicecomb-service-center のその他の脆弱性

• CVE-2023-44313高 7.5Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information thr…
• CVE-2021-21501高 7.5Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.