—

GO-2024-2496

Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/servicecomb-service-center

Details

Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability in github.com/apache/servicecomb-service-center.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/apache/servicecomb-service-center before v2.2.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/apache/servicecomb-service-center

Introduced in: 0

No fixed version published yet for github.com/apache/servicecomb-service-center (go modules). Pin to a known-safe version or switch to an alternative.

References

https://github.com/advisories/GHSA-r8xp-52mq-rmm8[ADVISORY]
https://nvd.nist.gov/vuln/detail/CVE-2023-44312[ADVISORY]
http://www.openwall.com/lists/oss-security/2024/01/31/5[WEB]
https://lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s[WEB]