GHSA-27h3-crw2-q36w
SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.skywalking:server-core | >= 9.7.0, < 10.4.0 | 10.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.
This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0.
Users are recommended to upgrade to version 10.4.0, which fixes the issue.
References
External links from the advisory. They lead to third-party sites.