GHSA-9xc9-xq7w-vpcr
Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/apache/servicecomb-service-center | < 2.2.0 | 2.2.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.
References
External links from the advisory. They lead to third-party sites.