CVE-2023-44313: Apache Servicecomb

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Affected products

• Apache Servicecomb: before 2.2.0 (fixed in 2.2.0)

Published 2024-01-31. Last modified 2026-06-17.