—

GO-2024-2495

Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability in github.com/apache/servicecomb-service-center

Details

Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability in github.com/apache/servicecomb-service-center.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/apache/servicecomb-service-center before v2.2.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/apache/servicecomb-service-center

Introduced in: 0

No fixed version published yet for github.com/apache/servicecomb-service-center (go modules). Pin to a known-safe version or switch to an alternative.

References

https://github.com/advisories/GHSA-9xc9-xq7w-vpcr[ADVISORY]
https://nvd.nist.gov/vuln/detail/CVE-2023-44313[ADVISORY]
http://www.openwall.com/lists/oss-security/2024/01/31/4[WEB]
https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r[WEB]