CVE-2023-44312: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 include. Users are recommended to upgrade to version 2.2.0, which fixes the issue...

PT-2024-13189

Name of the Vulnerable Software and Affected Versions Apache ServiceComb Service-Center versions prior to 2.1.0 Apache ServiceComb Service-Center versions prior to 2.2.0 is not needed as 2.1.0 is already included in the prior to 2.1.0 statement. Description The issue is related to the exposure of...

PT-2024-3866

Name of the Vulnerable Software and Affected Versions Apache ServiceComb versions prior to 2.1.0 Apache ServiceComb versions prior to 2.2.0 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability in Apache ServiceComb Service-Center, which can be exploited by attacker...

Apache ServiceComb Service-Center Code Issue Vulnerability

Apache ServiceComb Service-Center is a Restful-based service registry from the Apache Foundation that provides microservice discovery and microservice management. A code issue vulnerability exists in Apache ServiceComb Service-Center 2.1.0 and earlier versions, which stems from a server-side...

GHSA-PX4W-RCV2-6X8X Arbitrary code execution in Apache ServiceComb java-chassis

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5...

org.apache.servicecomb.toolkit:apache-servicecomb-toolkit-distribution (0.2.0), org.apache.servicecomb.toolkit:cli (0.2.0) +10 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.1.2)

org.openapitools:openapi-generator MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.apache.servicecomb.toolkit:apache-servicecomb-toolkit-distribution 0.2.0 -...

Apache Servicecomb Java Chassis Input Validation Error Vulnerability

Apache Servicecomb Java Chassis is the Apache Foundation , a Java language based on the Apache Foundation for building microservices to provide a whole solution for the code base . A security vulnerability exists in Apache ServiceComb-Java-Chassis versions 2.0.0 through 2.1.3, which stems from a...

CVE-2020-17532

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5...

Code injection

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5...

CVE-2020-17532 Apache ServiceComb Yaml remote deserialization vulnerability

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5...

PT-2021-10100

Name of the Vulnerable Software and Affected Versions: Apache ServiceComb-Java-Chassis versions 2.0.0 through 2.1.3 Description: The issue allows an authenticated user to inject data and potentially cause arbitrary code execution when the handler-router component is enabled in...

Apache Servicecomb Java Chassis 代码问题漏洞

Apache Servicecomb Java Chassis is the Apache Foundation , a Java language based on the Apache Foundation for building microservices to provide a whole solution for the code base . A security vulnerability exists in Apache ServiceComb-Java-Chassis versions 2.0.0 through 2.1.3, which stems from a...

CVE-2020-17532: Improper Input Validation

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5...