org.springframework.boot:spring-boot-actuator vulnerabilities (TuxCare)
16 vulnerabilities.
-
org.springframework.boot:spring-boot-actuatorTuxCare Mail Auto-Configuration Does Not Enable SSL Hostname Verification 5.0 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot's PID file write follows symlinks at predictable default path 4.7 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot's random value property source uses a weak PRNG unsuitable for secrets 4.8 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification 5.0 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot accepts predictable temp directory without ownership verification 7.0 High -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot DevTools remote secret comparison is vulnerable to timing attacks 7.5 High -
org.springframework.boot:spring-boot-actuatorTuxCare Authentication Bypass under Actuator CloudFoundry endpoints 8.2 High -
org.springframework.boot:spring-boot-actuatorTuxCare Authentication Bypass under Actuator Health groups paths 8.2 High -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 7.3 High -
org.springframework.boot:spring-boot-actuatorTuxCare CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader 6.3 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot server Web Observations DoS Vulnerability 5.3 Medium -
org.springframework.boot:spring-boot-actuatorTuxCare Spring-boot-admin sandbox bypass via crafted HTML 7.5 High -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot Welcome Page Denial of Service 7.5 High -
org.springframework.boot:spring-boot-actuatorTuxCare Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry 9.8 Critical -
org.springframework.boot:spring-boot-actuatorTuxCare Remote Code Execution in Spring Framework 9.8 Critical -
org.springframework.boot:spring-boot-actuatorTuxCare Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 7.8 High