CVE-2023-44313

🗓️ 31 Jan 2024 08:49:45Reported by apacheType

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the Apache ServiceComb service for detecting and managing microservices is related to insufficient validation of requests on the server side. This allows a malicious actor to execute an SSRF attack.	31 May 202400:00	–	bdu_fstec
Circl	CVE-2023-44313	31 Jan 202410:21	–	circl
CNNVD	Apache ServiceComb Service-Center Code Issue Vulnerability	31 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-44313 Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API	31 Jan 202408:49	–	cvelist
Github Security Blog	Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability	31 Jan 202409:30	–	github
NVD	CVE-2023-44313	31 Jan 202409:15	–	nvd
OSV	GHSA-9XC9-XQ7W-VPCR Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability	31 Jan 202409:30	–	osv
OSV	GO-2024-2495 Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability in github.com/apache/servicecomb-service-center	28 Jun 202415:28	–	osv
Prion	Server side request forgery (ssrf)	31 Jan 202409:15	–	prion
RedhatCVE	CVE-2023-44313	13 Feb 202519:29	–	redhatcve

NVD

Vulners

Node

apache servicecombRange<2.2.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache ServiceComb Service-Center",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.1.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/01/31/4
lists	www.lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r

17 Jun 2026 06:27Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5 - 7.6

EPSS0.0346

SSVC

CWE-918