club.zhcs:axe-sigar (>=1.5.13, <=1.5.13.2), com.github.drtrang:druid-spring-boot-actuator-autoconfigure (1.1.10) +333 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.13.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - club.zhcs:axe-sigar =1.5.13, =3.3.10, =3.3.10, =1.3.0,...

cn.home1:oss-lib-adminclient-spring-boot-1.4.2.release (>=1.0.7.oss, <=1.0.8.oss), cn.home1:oss-lib-hystrix-spring-boot-1.4.2.release (1.0.7.oss) +165 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.home1:oss-lib-adminclient-spring-boot-1.4.2.release...

cn.dubby:itbus (>=0.2.7, <=0.2.8), com.cedarsoftware:n-cube (>=4.0.6, <=4.0.16) +278 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.dubby:itbus =0.2.7, =4.0.6, =2.0.2-release, =1.0.7, =1.0.7...

com.garethahealy.poms:springboot-parent (1.0.0), com.garethahealy:springboot-parent (>=1.0.7, <=1.1.1) +32 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.garethahealy.poms:springboot-parent 1.0.0 -...

de.codecentric:spring-boot-admin-example (1.0.2), de.codecentric:spring-boot-admin-server (1.0.2) +10 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.2 -...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.1.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.1.release) +41 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.21.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway...

com.17jee:e-cloud-gateway (3.0.0.release), com.17jee:e-cloud-oauth (3.0.0.release) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.17jee:e-cloud-gateway 3.0.0.release -...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.7.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 -...

ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +7122 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=2.0.0.release, <=2.7.17)

org.springframework.boot:spring-boot-actuator MAVEN version =2.0.0.release, =0.1.2, =0.5.0, =0.5.21, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2023-34055 Source advisory:...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (1.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.4.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1), de.codecentric:spring-boot-admin-sample (>=1.1.0, <=1.1.1) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.bushidowallet:bushido-wallet-service =1.0.0, =1.1.0,...

am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5), cc.vihackerframework:vihacker-auth-starter (1.0.8.r) +978 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.0.0, <=3.0.12)

org.springframework.boot:spring-boot-actuator MAVEN version =3.0.0, =0.1.0, =1.0.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2023-34055 Source advisory: GHSA-JJFH-589G-3HJX...

com.github.zed-platform:zed-service-attachment-file (>=0.0.9, <=0.0.10), com.github.zed-platform:zed-service-document-mongo (>=0.0.8, <=0.0.10) +14 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.github.zed-platform:zed-service-attachment-file =0.0.9,...

io.github.resilience4j:resilience4j-spring-boot (>=0.12.0, <=0.12.1), org.springframework.boot:spring-boot-actuator-docs (1.5.5.release) +3 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.5.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - io.github.resilience4j:resilience4j-spring-boot =0.12.0,...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +68 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-start...

GHSA-V94H-HVHG-MF9H Spring Framework vulnerable to denial of service

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

au.com.mountain-pass:hyperstate (>=1, <=3), cc.catalysts.boot:cat-boot-cluster (>=0.0.10, <=0.1.14) +22 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =0.0.8, =0.50.3,...

org.springframework.boot:spring-boot-docs (1.1.0.release), org.springframework.boot:spring-boot-starter-actuator (1.1.0.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.0.release -...

Design/Logic Flaw

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

UBUNTU-CVE-2023-34053

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...