Vulnerabilities (CVE)

Filtered by vendor Ctrip Subscribe
Filtered by product Apollo
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10686 1 Ctrip 1 Apollo 2019-04-04 7.5 HIGH 10.0 CRITICAL
An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT. An attacker may use it to do an intranet port scan or raise a GET request via /system-info/health because the %23 substring is mishandled.