Steeltoeoss Steeltoe.management.endpoint vulnerabilities
- steeltoeoss steeltoe.management.endpoint, steeltoe.management.endpointbase +1 moreSteeltoe's sensitive actuators (heapdump/env) only require Restricted permission6.5 Medium
- steeltoeoss steeltoe.management.endpoint, steeltoe.management.endpointcore +1 moreSteeltoe's env sanitizer misses connection strings — leaks embedded DB passwords7.5 High
- steeltoeoss steeltoe.management.endpoint, steeltoe.management.endpointcore +1 moreSteeltoe vulnerable to management-port isolation bypass via spoofed Host header8.2 High