CVE-2023-38286
Spring-boot-admin sandbox bypass via crafted HTML
7.5 HighFix available
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.97%Up 0.9 points since Jul 14, 2023
What each source reports
NVD Score used
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
- Record
CVE-2023-38286- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
CVE List No score
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
- Record
CVE-2023-38286- Updated
- 2026-11-02
EUVDEUVD-2023-1989 No score
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
- Record
EUVD-2023-1989- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7gj7-224w-vpr3
Spring-boot-admin sandbox bypass via crafted HTML
Thymeleaf through 3.1.1.RELEASE as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 allows for a sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
Spring Boot Admin 3.1.2 and 2.7.16 contain mitigations for the issue. This bypass is achived via a library called Thymeleaf which has added counter measures for this sort of bypass in version 3.1.2.RELEASE which has explicity forbidden static access to org.springframework.util in expressions. Thymeleaf itself should not be considered vulnerable.
- Record
GHSA-7gj7-224w-vpr3- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
OSVGHSA-7gj7-224w-vpr3
Spring-boot-admin sandbox bypass via crafted HTML
Thymeleaf through 3.1.1.RELEASE as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 allows for a sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
Spring Boot Admin 3.1.2 and 2.7.16 contain mitigations for the issue. This bypass is achived via a library called Thymeleaf which has added counter measures for this sort of bypass in version 3.1.2.RELEASE which has explicity forbidden static access to org.springframework.util in expressions. Thymeleaf itself should not be considered vulnerable.
- Record
GHSA-7gj7-224w-vpr3- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
OSVCLSA-2025-1752019357 No score
TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)
TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.0.15.RELEASE.tuxcare.1.
- Record
CLSA-2025-1752019357- Updated
- 2026-11-02
OSVCLSA-2025-1764029254 No score
TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.10.
- Record
CLSA-2025-1764029254- Updated
- 2026-11-02
OSV No score
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
- Record
CVE-2023-38286- Updated
- 2026-11-02
OSVRHLW-2026-81384c14bc892e51 No score
Lightwell Security Advisory: thymeleaf 3.0.15.RELEASE-rhlw-00003
Red Hat Lightwell has released org.thymeleaf:thymeleaf 3.0.15.RELEASE-rhlw-00003 with a backported security fix.
CVE-2023-38286: Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
This patched artifact is a drop-in replacement for org.thymeleaf:thymeleaf 3.0.15.RELEASE from Maven Central.
- Record
RHLW-2026-81384c14bc892e51- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
de.codecentric:spring-boot-admin-serverMaven |
3.0.0 up to 3.1.2 | 3.1.2 |
de.codecentric:spring-boot-admin-serverMaven |
before 2.7.16 | 2.7.16 |
org.thymeleaf:thymeleafTuxCare:Maven |
3.0.15.RELEASE up to 3.0.15.RELEASE.tuxcare.1, plus listed versions 3.0.15.RELEASE-tuxcare.2 |
3.0.15.RELEASE.tuxcare.1 |
org.springframework.boot:org.springframework.boot.gradle.pluginTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-bootTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-actuatorTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-actuator-autoconfigureTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-antlibTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-autoconfigureTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-autoconfigure-processorTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework.boot:spring-boot-buildpack-platformTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-cliTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-configuration-metadataTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-configuration-processorTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-dependenciesTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-devtoolsTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-gradle-pluginTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-jarmode-layertoolsTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-loaderTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-loader-toolsTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-maven-pluginTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-parentTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-properties-migratorTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starterTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-activemqTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-actuatorTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-amqpTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-aopTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-artemisTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-batchTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-cacheTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-cassandraTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-cassandra-reactiveTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-couchbaseTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-couchbase-reactiveTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-elasticsearchTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-jdbcTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-jpaTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-ldapTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-mongodbTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-mongodb-reactiveTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-neo4jTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-r2dbcTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-redisTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-redis-reactiveTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-data-restTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-freemarkerTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-graphqlTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-groovy-templatesTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-hateoasTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-integrationTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jdbcTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jerseyTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jettyTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jooqTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jsonTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-jta-atomikosTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-log4j2TuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-loggingTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-mailTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-mustacheTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-oauth2-clientTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-oauth2-resource-serverTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-parentTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-quartzTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-reactor-nettyTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-rsocketTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-securityTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-testTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-thymeleafTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-tomcatTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-undertowTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-validationTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-webTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-web-servicesTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-webfluxTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-starter-websocketTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-testTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
org.springframework.boot:spring-boot-test-autoconfigureTuxCare:Maven |
2.7.18 up to 2.7.18-tuxcare.10, plus listed versions 2.7.18-tuxcare.82.7.18.tuxcare2.7.18.tuxcare.12.7.18.tuxcare.22.7.18.tuxcare.3 Show 4 moreShow less2.7.18.tuxcare.42.7.18.tuxcare.52.7.18.tuxcare.62.7.18.tuxcare.7 |
2.7.18-tuxcare.10 |
de.codecentric:spring-boot-admin-serverMaven |
3.0.0 up to 3.1.2, plus listed versions 3.0.13.0.23.0.33.0.43.1.03.1.1 |
3.1.2 |
de.codecentric:spring-boot-admin-serverMaven |
before 2.7.16, plus listed versions 1.0.21.0.31.0.41.0.51.1.0 Show 45 moreShow less1.1.11.1.21.2.01.2.11.2.21.2.31.2.41.3.01.3.11.3.21.3.31.3.41.3.51.3.61.3.71.4.01.4.11.4.21.4.31.4.41.4.51.4.61.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.72.0.02.0.12.0.22.0.32.0.42.0.52.0.62.1.02.1.12.1.22.1.32.1.42.1.52.1.62.2.0 |
2.7.16 |
org.thymeleaf:thymeleafRed Hat Lightwell:Maven |
before 3.0.15.RELEASE-rhlw-00003, plus listed versions 1.0.01.0.0-beta11.0.0-beta21.0.0-beta31.0.0-beta4 Show 45 moreShow less1.0.0-beta51.0.11.1.01.1.11.1.21.1.31.1.41.1.52.0.02.0.0-beta12.0.0-beta22.0.12.0.102.0.112.0.122.0.132.0.142.0.152.0.162.0.172.0.182.0.192.0.22.0.202.0.212.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.0-beta12.1.0-beta22.1.0-m12.1.0-m22.1.0-m32.1.0.RELEASE2.1.1.RELEASE2.1.2.RELEASE2.1.3.RELEASE2.1.4.RELEASE2.1.5.RELEASE2.1.6.RELEASE3.0.0.ALPHA01 |
3.0.15.RELEASE-rhlw-00003 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-38286 is a high vulnerability (CVSS 7.5) in Codecentric Spring Boot Admin, published July 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 61st percentile. Fixed in de.codecentric:spring-boot-admin-server 3.1.2.
References
github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI
nvd.nist.gov/vuln/detail/CVE-2023-38286
This page doesn't list everything
Left out here: 68 versions. The JSON record has them.