com.ctrip.framework.apollo:apollo
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching | com.ctrip.framework.apollo:apollo | Maven | High | No fix reported | |
| Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center | com.ctrip.framework.apollo:apollo | Maven | Medium | No fix reported | |
| Apollo ConfigService access key authentication bypass via raw config file appId parsing | com.ctrip.framework.apollo:apollo | Maven | High | No fix reported | |
| Apollo has potential access control security issue in eureka | com.ctrip.framework.apollo:apollo | Maven | High | Fix reported | |
| apollo-portal has potential unauthorized access issue | com.ctrip.framework.apollo:apollo | Maven | Medium | Fix reported | |
| Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo | com.ctrip.framework.apollo:apollo | Maven | Critical | No fix reported | |
| apollo-portal has potential CSRF issue | com.ctrip.framework.apollo:apollo | Maven | Medium | Fix reported |