Path traversal in ServiceCenter · CVE-2021-21501 · GitHub Advisory Database · GitHub

Path traversal in ServiceCenter

High severity GitHub Reviewed Published Sep 1, 2021 to the GitHub Advisory Database • Updated Apr 24, 2023

Package

github.com/apache/servicecomb-service-center (Go)

Affected versions

< 2.0.0

Patched versions

2.0.0

Description

Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.

References

Published by the National Vulnerability Database

Aug 10, 2021

Reviewed Aug 30, 2021

Published to the GitHub Advisory Database Sep 1, 2021

Last updated Apr 24, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N