id: GO-2024-2495
modules:
    - module: github.com/apache/servicecomb-service-center
      non_go_versions:
        - fixed: 2.2.0
      vulnerable_at: 1.4.8
summary: Apache ServiceComb Service-Center Server-Side Request Forgery vulnerability in github.com/apache/servicecomb-service-center
cves:
    - CVE-2023-44313
ghsas:
    - GHSA-9xc9-xq7w-vpcr
references:
    - advisory: https://github.com/advisories/GHSA-9xc9-xq7w-vpcr
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-44313
    - web: http://www.openwall.com/lists/oss-security/2024/01/31/4
    - web: https://lists.apache.org/thread/kxovd455o9h4f2v811hcov2qknbwld5r
source:
    id: GHSA-9xc9-xq7w-vpcr
    created: 2024-06-14T11:37:55.379016-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE