HIGH7.5
GHSA-x6jv-5vfg-gm7x
Path traversal in ServiceCenter
Quick fix
GHSA-x6jv-5vfg-gm7x — github.com/apache/servicecomb-service-center: upgrade to the fixed version with the command below.
go get github.com/apache/servicecomb-service-center@v2.0.0Details
Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/apache/servicecomb-service-center
Introduced in:
0Fixed in: 2.0.0Fix
go get github.com/apache/servicecomb-service-center@v2.0.0References
- https://nvd.nist.gov/vuln/detail/CVE-2021-21501[ADVISORY]
- https://github.com/apache/servicecomb-service-center/pull/788[WEB]
- https://github.com/apache/servicecomb-service-center/commit/f4f44fe5d4a7e530ca8ee7c6f2c9e891ae8353c9[WEB]
- https://github.com/apache/servicecomb-service-center[PACKAGE]
- https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cdev.servicecomb.apache.org%3E[WEB]
- http://www.openwall.com/lists/oss-security/2021/08/10/3[WEB]