Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-44313 · ADVISORY
• apache/servicecomb-service-center · PACKAGE
• lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r · WEB
• openwall.com/lists/oss-security/2024/01/31/4 · WEB
• GitHub Advisory GHSA-9xc9-xq7w-vpcr · ADVISORY

github.com/apache/servicecomb-service-center のその他の脆弱性

• CVE-2023-44312高 7.5Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Serv…
• CVE-2021-21501高 7.5Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.