High severityNVD Advisory· Published Jan 31, 2024· Updated Feb 13, 2025
Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API
CVE-2023-44313
Description
Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).
Users are recommended to upgrade to version 2.2.0, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/apache/servicecomb-service-centerGo | < 2.2.0 | 2.2.0 |
Affected products
2- Range: 0
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-9xc9-xq7w-vpcrghsaADVISORY
- lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5rghsavendor-advisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2023-44313ghsaADVISORY
- www.openwall.com/lists/oss-security/2024/01/31/4ghsaWEB
News mentions
0No linked articles in our index yet.