com.ctrip.framework.apollo:apollo vulnerabilities (Maven)
7 vulnerabilities.
-
com.ctrip.framework.apollo:apolloMaven Apollo ConfigService access key authentication bypass via raw config file appId parsing 7.5 High -
com.ctrip.framework.apollo:apolloMaven Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching 7.5 High -
com.ctrip.framework.apollo:apolloMaven Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId 6.5 Medium -
com.ctrip.framework.apollo:apolloMaven Potential unauthorized access issue in apollo-portal 4.3 Medium -
com.ctrip.framework.apollo:apolloMaven Apollo has potential access control security issue in eureka 7.5 High -
com.ctrip.framework.apollo:apolloMaven apollo-portal has potential CSRF issue 5.7 Medium -
com.ctrip.framework.apollo:apolloMaven Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo 10.0 Critical