CVE-2023-44312: Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

January 31, 2024 (updated February 13, 2025)

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center. This issue affects Apache ServiceComb Service-Center before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

References

github.com/advisories/GHSA-r8xp-52mq-rmm8
github.com/apache/servicecomb-service-center
lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s
nvd.nist.gov/vuln/detail/CVE-2023-44312

Detect and mitigate CVE-2023-44312 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →