Skip to content

Product

com.ctrip.framework.apollo/apollo-core vulnerabilities

1 published CVE affecting com.ctrip.framework.apollo/apollo-core, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest com.ctrip.framework.apollo/apollo-core CVEs

Newest publication first

  1. CVE-2020-15170 Missing access control in apollo-adminservice

    Published
    HighCVSS 7.0 EPSS 1.3%

    apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internet(which is not recommended), there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.