You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by liubao <li...@apache.org> on 2024/02/01 03:26:38 UTC

CVE-2023-44312: Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server

Reply-To: dev@servicecomb.apache.org
Subject: CVE-2023-44312: Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server 

Affected versions:

- Apache ServiceComb Service-Center through 2.1.0

Description:

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects 

Apache ServiceComb Service-Center

 before 2.1.0 (include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Credit:

苏 安 <su...@hotmail.com> (finder)

References:

https://lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s
https://servicecomb.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-44312