7.6 High

CVE-2023-44313 Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center

Description

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache ServiceComb Service-Center 2.1	earliest → 2.1.0	No fix stated

The 2 CVEs of Apache ServiceComb Service-Center →

CVE-2023-44312 Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects … 5.8 Medium

Do you use Apache ServiceComb Service-Center?

Track this CVE Watch Apache ServiceComb Service-Center Check my SBOMs

www.cveye.io/en/cve/CVE-2023-44313

Timeline

Published January 31, 2024
Last modified February 13, 2025

References

lists.apache.org lists.apache.org
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-44313 Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center

Description

Affected products and versions

Other CVEs of Apache ServiceComb Service-Center