Vendor/product archive

ctrip / apollo CVEs

Beta · best-effort

2 CVEs tagged to ctrip / apollo — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to ctrip vendor archive

CVE-2020-15170

Published Sep 10, 2020

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internet(which is not recommended), there are potential securit…

CVSS 7.0 · High

Vendor/product tagsBeta · best-effort

CVE-2019-10686

Published Apr 1, 2019

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/heal…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1