Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

높음 7.5CVE-2023-44312 · GHSA-r8xp-52mq-rmm8 · GO-2024-2496 · Published 31/01/2024 · updated 17/06/2026

요약

CVE-2023-44312은(는) github.com/apache/servicecomb-service-center, servicecomb (apache)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.81%, 전체 취약점의 57.2%보다 높음.
조치: 2.2.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
github.com/apache/servicecomb-service-center Go	`< 2.2.0all versions`	`2.2.0`
servicecomb apache	`< 2.2.0`	`2.2.0`

Description

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center. This issue affects Apache ServiceComb Service-Center before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2023-44312 · ADVISORY
apache/servicecomb-service-center · PACKAGE
lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s · WEB
openwall.com/lists/oss-security/2024/01/31/5 · WEB
GitHub Advisory GHSA-r8xp-52mq-rmm8 · ADVISORY

github.com/apache/servicecomb-service-center의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

github.com/apache/servicecomb-service-center

< 2.2.0all versions

2.2.0

servicecomb

apache

< 2.2.0

2.2.0

Description

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

github.com/apache/servicecomb-service-center의 다른 취약점

모두 보기 →