CVE-2025-53602

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

CVE-2025-53602

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Dromara open-capacity-platform information leakage vulnerability

Dromara open-capacity-platform is a microservices capacity open platform from Dromara. An information disclosure vulnerability exists in Dromara open-capacity-platform version 2.0.1, which stems from an information disclosure vulnerability in file/actuator/heapdump...

CVE-2024-3928: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be...

PT-2024-28418

Name of the Vulnerable Software and Affected Versions Dromara open-capacity-platform version 2.0.1 Description A vulnerability was found in the auth-server component, specifically affecting an unknown functionality of the file /actuator/heapdump. This issue leads to information disclosure and can...