Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.ctrip.framework.apollo:apollo

7 known vulnerabilities (3 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 3 high, 3 medium
Dependents
0
Registry
Maven Central

Advisories 7

  • CVE-2025-32781Medium 6.5

    Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

    Affected: all versions.

  • Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching

    Affected: through 2.0.1.

  • Apollo ConfigService access key authentication bypass via raw config file appId parsing

    Affected: all versions.

  • CVE-2024-43397Medium 4.3

    Potential unauthorized access issue in apollo-portal

    Affected: fixed in 2.3.0.

  • Apollo has potential access control security issue in eureka

    Affected: fixed in 2.1.0.

  • CVE-2023-25569Medium 5.7

    apollo-portal has potential CSRF issue

    Affected: fixed in 2.1.0.

  • An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT.

    Affected: through 1.3.0.