CVE-2023-44312: Apache ServiceComb Service-Center Exposure of Sensitive Information to an Unauthorized Actor vulnerability

January 31, 2024 (updated February 13, 2025)

Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center. This issue affects Apache ServiceComb Service-Center before 2.1.0 (included). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

References

github.com/advisories/GHSA-r8xp-52mq-rmm8
github.com/apache/servicecomb-service-center
lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s
nvd.nist.gov/vuln/detail/CVE-2023-44312

Code Behaviors & Features

Detect and mitigate CVE-2023-44312 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →