org.springframework.boot:spring-boot-loader vulnerabilities (TuxCare)
13 vulnerabilities.
-
org.springframework.boot:spring-boot-loaderTuxCare Predictable Temp Directory in Artemis Auto-configuration 5.3 Medium -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot's PID file write follows symlinks at predictable default path 4.7 Medium -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot's random value property source uses a weak PRNG unsuitable for secrets 4.8 Medium -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot accepts predictable temp directory without ownership verification 7.0 High -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot DevTools remote secret comparison is vulnerable to timing attacks 7.5 High -
org.springframework.boot:spring-boot-loaderTuxCare Authentication Bypass under Actuator CloudFoundry endpoints 8.2 High -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed 7.3 High -
org.springframework.boot:spring-boot-loaderTuxCare CVE-2024-38807: Signature Forgery Vulnerability in Spring Boot's Loader 6.3 Medium -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot server Web Observations DoS Vulnerability 5.3 Medium -
org.springframework.boot:spring-boot-loaderTuxCare Spring-boot-admin sandbox bypass via crafted HTML 7.5 High -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot Welcome Page Denial of Service 7.5 High -
org.springframework.boot:spring-boot-loaderTuxCare Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry 9.8 Critical -
org.springframework.boot:spring-boot-loaderTuxCare Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot 7.8 High