CVE-2023-44312: Exposure of Sensitive Information to an Unauthorized Actor

January 31, 2024

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects

Apache ServiceComb Service-Center

before 2.1.0 (include).

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

References

www.openwall.com/lists/oss-security/2024/01/31/5
github.com/advisories/GHSA-r8xp-52mq-rmm8
lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s
nvd.nist.gov/vuln/detail/CVE-2023-44312

Detect and mitigate CVE-2023-44312 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →