com.ctrip.framework.apollo:apollo@1.2.0 vulnerabilities
-
latest version
2.0.1
-
first published
6 years ago
-
latest version published
2 years ago
-
licenses detected
- [1.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.ctrip.framework.apollo:apollo package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) allowing low-privileged users to create a page that can silently sends a request to assign new roles for an authenticated portal admin without any additional confirmation. How to fix Cross-site Request Forgery (CSRF)? A fix was pushed into the |
[0,)
|
Affected versions of this package are vulnerable to Improper Authentication in How to fix Improper Authentication? A fix was pushed into the |
[0,)
|
Affected versions of this package are vulnerable to Server-Side Request Forgery (SSRF). The interface How to fix Server-Side Request Forgery (SSRF)? Upgrade |
[0,1.4.0)
|