oss-sec mailing list archives

CVE-2023-44313: Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API


From: "bismy" <bismy () qq com>
Date: Wed, 31 Jan 2024 15:49:54 +0800

Affected versions:

- Apache ServiceComb Service-Center through 2.1.0

Description:

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive 
server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Credit:

?? ??  (finder)

References:

https://servicecomb.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-44313

Current thread: