QwikSec

Security Database

CVE

CWE

Training

CVE-2020-17532

Published: Jan 25, 2021

Modified: Feb 13, 2025

PUBLISHED

Description

When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5

Vendor	Product	Versions
Apache Software Foundation	Apache ServiceComb-Java-Chassis	affected `Apache ServiceComb-Java-Chassis 2.x 2.0.0 to 2.1.3`

Weaknesses (CWE)

References

https://seclists.org/oss-sec/2021/q1/60

x_refsource_MISC

https://issues.apache.org/jira/browse/SCB-2145

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.