Product

org.apache.servicecomb/java-chassis vulnerabilities

1 published CVE affecting org.apache.servicecomb/java-chassis, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.servicecomb/java-chassis CVEs

Newest publication first

CVE-2020-17532 Arbitrary code execution in Apache ServiceComb java-chassis
Published 2021-01-25

HighCVSS 8.8 EPSS 3.4%

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.servicecomb/java-chassis vulnerabilities

Latest org.apache.servicecomb/java-chassis CVEs

CVE-2020-17532 Arbitrary code execution in Apache ServiceComb java-chassis