What is GHSA-x6jv-5vfg-gm7x?

GHSA-x6jv-5vfg-gm7x is a security advisory published by GitHub Security Advisories with High severity. Path traversal in ServiceCenter

Which CVE IDs does GHSA-x6jv-5vfg-gm7x cover?

GHSA-x6jv-5vfg-gm7x covers the following CVE IDs: CVE-2021-21501. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6jv-5vfg-gm7x?

GHSA-x6jv-5vfg-gm7x has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-x6jv-5vfg-gm7x?

GHSA-x6jv-5vfg-gm7x affects 1 product, including: go/github.com/apache/servicecomb-service-center:\u003c 2.0.0.

GHSA-x6jv-5vfg-gm7xHighCVSS 7.5

Path traversal in ServiceCenter

Vendor

GitHub Security Advisories

Published

September 1, 2021

Last Modified

April 24, 2023

🔗 CVE IDs covered (1)

CVE-2021-21501 →

📋 Description

Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.

🎯 Affected products1

go/github.com/apache/servicecomb-service-center:< 2.0.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2021-21501
https://github.com/apache/servicecomb-service-center/pull/788
https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cdev.servicecomb.apache.org%3E
http://www.openwall.com/lists/oss-security/2021/08/10/3
https://github.com/apache/servicecomb-service-center/commit/f4f44fe5d4a7e530ca8ee7c6f2c9e891ae8353c9
https://github.com/advisories/GHSA-x6jv-5vfg-gm7x