Apache Software Foundation Apache Servicecomb Service-Center vulnerabilities

2 known vulnerabilities affecting apache_software_foundation/apache_servicecomb_service-center.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2023-44313HIGHCVSS 7.5≤ 2.1.02024-01-31

CVE-2023-44313 [HIGH] CWE-918 CVE-2023-44313: Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

CVE-2023-44312HIGHCVSS 7.5≤ 2.1.02024-01-31

CVE-2023-44312 [HIGH] CWE-200 CVE-2023-44312: Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.