CVE-2023-44313CWE-918

Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API

High · published January 31, 2024

CVSS v3.1
7.6
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.03460 · 89.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-01-31T08:49Z
EPSS history
Timeline
  • 31 JAN 08:49Z
    Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API
    cvelistv5