Apache Servicecomb vulnerabilities

3 CVEs affecting Apache Servicecomb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44313, published 2024-01-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-21501, published 2021-08-10. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.
CVE-2023-44313, published 2024-01-31. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache…
CVE-2023-44312, published 2024-01-31. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended…