GitHub Advisoryadvisory · Go

GHSA-r8xp-52mq-rmm8 Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

MEDIUM Published 2024-01-31 Modified 2025-02-13 Official page ↗
Aliases
CVE-2023-44312
Ecosystem
Go
Packages
github.com/apache/servicecomb-service-center
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-01-31

Affected packages

• Go github.com/apache/servicecomb-service-center: < 2.2.0 → fixed in 2.2.0

Description

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center. This issue affects Apache ServiceComb Service-Center before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2023-44312 Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References