pkg:Maven/com.ctrip.framework.apollo:apollo

All known vulnerabilities

• CRITICAL10.0CVE-2019-10686Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
  from 0, <= 1.3.0
• HIGH7.5CVE-2026-59955Apollo ConfigService access key authentication bypass via raw config file appId parsing
  from 0
• HIGH7.5CVE-2026-59954Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching
  from 0, <= 2.0.1
• HIGH7.5Apollo has potential access control security issue in eureka
  from 0, < 2.1.0
• MEDIUM6.5Apollo Portal: There is a risk of unauthorized access to the Apollo configuration center
  from 0
• MEDIUM5.7apollo-portal has potential CSRF issue
  from 0, < 2.1.0
• MEDIUM4.3apollo-portal has potential unauthorized access issue
  from 0, < 2.3.0