org.springframework.boot:spring-boot-devtools vulnerabilities (TuxCare)
16 vulnerabilities.
-
org.springframework.boot:spring-boot-devtoolsTuxCare Predictable Temp Directory in Artemis Auto-configuration 5.3 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Mail Auto-Configuration Does Not Enable SSL Hostname Verification 5.0 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot's PID file write follows symlinks at predictable default path 4.7 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot's random value property source uses a weak PRNG unsuitable for secrets 4.8 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification 5.0 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot accepts predictable temp directory without ownership verification 7.0 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot DevTools remote secret comparison is vulnerable to timing attacks 7.5 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Authentication Bypass under Actuator CloudFoundry endpoints 8.2 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Authentication Bypass under Actuator Health groups paths 8.2 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 7.3 High -
org.springframework.boot:spring-boot-devtoolsTuxCare CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader 6.3 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot server Web Observations DoS Vulnerability 5.3 Medium -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring-boot-admin sandbox bypass via crafted HTML 7.5 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot Welcome Page Denial of Service 7.5 High -
org.springframework.boot:spring-boot-devtoolsTuxCare Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry 9.8 Critical -
org.springframework.boot:spring-boot-devtoolsTuxCare Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 7.8 High