Executive brief
apollo-portal has potential CSRF issue
Affected products
- Maven com.ctrip.framework.apollo:apollo
Junglewise Threat Intelligence
CVE-2023-25569: apollo-portal has potential CSRF issue
CVE-2023-25569 · Severity: low · CVSS 3.1 · Published 2023-02-22
Technologies: com.ctrip.framework.apollo:apollo (Maven). Vendors: Maven.
Related threats
- Apollo ConfigService authentication bypass in raw configuration endpoint
- apolloconfig Apollo ConfigService authentication bypass via appId mismatch
- Apollo Portal Authorization Bypass in Release Controller
- apollo-portal has potential unauthorized access issue
- Apollo missing authentication in built-in Eureka service