CVE-2020-17532

2021-01-2510:16:32

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5

CPENameOperatorVersion
servicecomb-java-chassiseq2.0.1
servicecomb-java-chassiseq2.1.2
servicecomb-java-chassiseq2.0.0
servicecomb-java-chassiseq2.1.3
servicecomb-java-chassiseq2.1.0
servicecomb-java-chassiseq2.1.1
servicecomb-java-chassiseq2.0.2

Name	Operator	Version
servicecomb-java-chassis	eq	2.0.1
servicecomb-java-chassis	eq	2.1.2
servicecomb-java-chassis	eq	2.0.0
servicecomb-java-chassis	eq	2.1.3
servicecomb-java-chassis	eq	2.1.0
servicecomb-java-chassis	eq	2.1.1
servicecomb-java-chassis	eq	2.0.2