Vulnerabilities

TI-2025-23818 CVE-2025-32781 · GHSA-jxpj-9j24-w337

Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

LOW 29

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00415 Published 2026-07-15 Fixed in 2.5.0 CWE-639

TI-2026-42758 CVE-2026-59954 · GHSA-4w3q-qpfq-v992

MEDIUM 40

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2026-07-15 Fixed in 2.5.2 CWE-20

TI-2026-42759 CVE-2026-59955 · GHSA-h4pc-58cc-hc95

MEDIUM 40

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2026-07-15 Fixed in 2.5.2 CWE-20

TI-2024-29046 CVE-2024-43397 · GHSA-c6c3-h4f7-3962

LOW 20

Apollo is a configuration management system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00349 Published 2024-08-20 Fixed in 2.3.0 CWE-284

TI-2024-28573 CVE-2024-42662 · GHSA-j5jg-j64j-c6rq

LOW 39

An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2024-08-20 No fix listed

TI-2022-04551 CVE-2022-4962 · GHSA-6fwf-qq7q-w473

MEDIUM 53

A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00463 Published 2024-01-12 No fix listed CWE-285

TI-2023-10873 CVE-2023-25570 · GHSA-368x-wmmg-hq5c

MEDIUM 40

Apollo is a configuration management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2023-02-20 Fixed in 2.1.0 CWE-306

TI-2023-10872 CVE-2023-25569 · GHSA-fmxq-v8mg-qh25

LOW 26

Apollo is a configuration management system.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00351 Published 2023-02-20 Fixed in 2.1.0 CWE-352