Lucene search
+L

48 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/09 12:00 a.m.•1 views

CVE-2022-46166: Improper Control of Generation of Code

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...

9.8CVSS5.7AI score0.01478EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/12/09 12:00 a.m.•58 views

spring-boot-admin 代码注入漏洞

spring-boot-admin is an open source based on Spring boot Mybatis backend management system , with user management , menu management and role management 3 functions , permission control to the button level . A code injection vulnerability exists in spring-boot-admin versions prior to 2.6.10 and...

9.8CVSS8.4AI score0.01478EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/12/09 12:00 a.m.•24 views

PT-2022-27781 · Unknown · Spring-Boot-Admin

Name of the Vulnerable Software and Affected Versions: Spring Boot Admin versions prior to 2.6.10 Spring Boot Admin versions prior to 2.7.8 Description: The issue affects users who run Spring Boot Admin Server with enabled Notifiers and write access to environment variables via UI. This allows fo...

9.8CVSS9.7AI score0.01478EPSS
SaveExploits0References9
Hacker One
Hacker One
•added 2021/12/06 8:41 a.m.•40 views

8x8: Default credentials lead to Spring Boot Admin dashboard access

An instance hosting Spring Boot Admin was left exposed with default credentials set. The related instance did not contain anything sensitive. The issue has been rectified...

2.1AI score
SaveExploits0
NVD
NVD
•added 2021/08/26 3:15 a.m.•52 views

CVE-2020-19704

A stored cross-site scripting XSS vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00475EPSS
SaveExploits1References1
OSV
OSV
•added 2021/08/26 3:15 a.m.•11 views

CVE-2020-19704

A stored cross-site scripting XSS vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS5.9AI score0.00475EPSS
SaveExploits1References1
CVE
CVE
•added 2021/08/26 2:22 a.m.•68 views

CVE-2020-19704

The CVE-2020-19704 entry describes a stored cross-site scripting (XSS) vulnerability in spring-boot-admin, via ResourceController.java, with exploitation possible to run arbitrary web scripts/HTML. Documents confirm affected software is spring-boot-admin and the vulnerable component/file is Resou...

5.4CVSS5.3AI score0.00475EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/08/26 12:00 a.m.•14 views

spring-boot-admin 跨站脚本漏洞

spring-boot-admin is an open source backend management system based on Spring boot Mybatis , with user management , menu management and role management 3 functions , permission control to the button level . spring-boot-admin There is a security vulnerability that can be exploited by attackers to...

5.4CVSS6.2AI score0.00475EPSS
SaveExploits1References2
Rows per page
Query Builder