CVE-2023-44313

high-risk
Published 2024-01-31

Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to upgrade to version 2.2.0, which fixes the issue.

Do I need to act?

!
69.1% chance of exploitation in next 30 days
EPSS score — higher than 31% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.6/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Apache

References (4)

Mailing List http://www.openwall.com/lists/oss-security/2024/01/31/4
Mailing List https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r
Mailing List http://www.openwall.com/lists/oss-security/2024/01/31/4
Mailing List https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r
51
/ 100
high-risk
Severity 27/34 · High
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal