You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by liubao <li...@apache.org> on 2024/08/29 01:42:18 UTC

CVE-2023-44313: Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API

Affected versions:

- Apache ServiceComb Service-Center through 2.1.0

Description:

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Credit:

苏 安 <su...@hotmail.com> (finder)

References:

https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r
https://servicecomb.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-44313