Executive brief
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
Affected products
- Maven com.ctrip.framework.apollo:apollo
Junglewise Threat Intelligence
CVE-2019-10686: Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
CVE-2019-10686 · Severity: low · CVSS 3 · Published 2019-04-18
Technologies: com.ctrip.framework.apollo:apollo (Maven). Vendors: Maven.
Related threats
- Apollo ConfigService authentication bypass in raw configuration endpoint
- apolloconfig Apollo ConfigService authentication bypass via appId mismatch
- Apollo Portal Authorization Bypass in Release Controller
- apollo-portal has potential unauthorized access issue
- Apollo missing authentication in built-in Eureka service