GCVE - cpe:2.3:a:apache:servicecomb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:servicecomb:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Servicecomb (`5ce457c4-5018-50db-ab0b-d1dea569dd6a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:apaches/ervicecomb`	purl2cpe	2026-06-01 10:14:28.627021

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-44313`	vulnerable	2026-06-08 06:12:40.097334	Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API HIGH (7.6) Server-Side Request Forgery (SSRF) vulnerability in Apache ServiceComb Service-Center. Attackers can obtain sensitive server information through specially crafted requests.This issue affects Apache ServiceComb before 2.1.0(include). Users are recommended to upgrade to version 2.2.0, which fixes the issue. Published: 2024-01-31T08:49:45.962Z Updated: 2025-02-13T17:13:39.249Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r http://www.openwall.com/lists/oss-security/2024/01/31/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-44312`	vulnerable	2026-06-08 06:12:40.096654	Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server MEDIUM (5.8) Exposure of Sensitive Information to an Unauthorized Actor in Apache ServiceComb Service-Center.This issue affects Apache ServiceComb Service-Center before 2.1.0 (include). Users are recommended to upgrade to version 2.2.0, which fixes the issue. Published: 2024-01-31T08:49:12.741Z Updated: 2025-05-30T18:39:28.124Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/dkvlgnrmc17qzjdy9k0cr60wpzcssk1s http://www.openwall.com/lists/oss-security/2024/01/31/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21501`	vulnerable	2026-06-08 05:29:12.167646	ServiceComb ServiceCenter Directory Traversal Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0. Published: 2021-08-10T09:20:09.000Z Updated: 2024-08-03T18:16:22.624Z Open on db.gcve.eu Reference links https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cdev.servicecomb.apache.org%3E https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cannounce.apache.org%3E http://www.openwall.com/lists/oss-security/2021/08/10/3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.