org.springframework.boot:spring-boot vulnerabilities (TuxCare)
17 vulnerabilities.
-
org.springframework.boot:spring-bootTuxCare Predictable Temp Directory in Artemis Auto-configuration 5.3 Medium -
org.springframework.boot:spring-bootTuxCare Mail Auto-Configuration Does Not Enable SSL Hostname Verification 5.0 Medium -
org.springframework.boot:spring-bootTuxCare Spring Boot's PID file write follows symlinks at predictable default path 4.7 Medium -
org.springframework.boot:spring-bootTuxCare Spring Boot's random value property source uses a weak PRNG unsuitable for secrets 4.8 Medium -
org.springframework.boot:spring-bootTuxCare Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification 5.0 Medium -
org.springframework.boot:spring-bootTuxCare Spring Boot accepts predictable temp directory without ownership verification 7.0 High -
org.springframework.boot:spring-bootTuxCare Spring Boot DevTools remote secret comparison is vulnerable to timing attacks 7.5 High -
org.springframework.boot:spring-bootTuxCare Authentication Bypass under Actuator CloudFoundry endpoints 8.2 High -
org.springframework.boot:spring-bootTuxCare Authentication Bypass under Actuator Health groups paths 8.2 High -
org.springframework.boot:spring-bootTuxCare Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 7.3 High -
org.springframework.boot:spring-bootTuxCare CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader 6.3 Medium -
org.springframework.boot:spring-bootTuxCare Spring Boot server Web Observations DoS Vulnerability 5.3 Medium -
org.springframework.boot:spring-bootTuxCare Spring-boot-admin sandbox bypass via crafted HTML 7.5 High -
org.springframework.boot:spring-bootTuxCare Spring Boot Welcome Page Denial of Service 7.5 High -
org.springframework.boot:spring-bootTuxCare Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry 9.8 Critical -
org.springframework.boot:spring-bootTuxCare Remote Code Execution in Spring Framework 9.8 Critical -
org.springframework.boot:spring-bootTuxCare Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 7.8 High