biz.dfch.j:activiti.wrapper (>=0.0.6, <=0.0.7), com.clusterra:clusterra-iam-application (>=1.1.0.release, <=1.2.1.release) +43 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - biz.dfch.j:activiti.wrapper =0.0.6, =1.1.0.release,...

org.springframework.boot:spring-boot-docs (1.1.10.release), org.springframework.boot:spring-boot-starter-actuator (1.1.10.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.10.release -...

com.vilt-group.minium:minium-app (0.9.3), de.codecentric:spring-boot-starter-batch-web (1.0.0.release) +3 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.0.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.vilt-group.minium:minium-app 0.9.3 -...

com.github.zed-platform:zed-panel (>=0.0.18, <=0.0.19), com.github.zed-platform:zed-service-attachment-file (>=0.0.12, <=0.0.19) +28 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.github.zed-platform:zed-panel =0.0.18, =0.0.12, =0.0.12,...

io.hawt:hawtio-sample-springboot (1.4.55), io.hawt:hawtio-sample-springboot-authentication (1.4.55) +15 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - io.hawt:hawtio-sample-springboot 1.4.55 -...

com.stormpath.spring:stormpath-sdk-examples-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1), com.stormpath.spring:stormpath-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

org.springframework.boot:spring-boot-docs (1.0.0.release), org.springframework.boot:spring-boot-starter-actuator (1.0.0.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.0.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.0.0.release -...

au.com.mountain-pass:hyperstate (>=1, <=3), cc.catalysts.boot:cat-boot-cluster (>=0.0.10, <=0.1.14) +22 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - au.com.mountain-pass:hyperstate =1, =0.0.10, =0.0.8, =0.50.3,...

am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5), cc.vihackerframework:vihacker-auth-starter (1.0.8.r) +978 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.0.0, <=3.0.12)

org.springframework.boot:spring-boot-actuator MAVEN version =3.0.0, =0.1.0, =1.0.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2023-34055 Source advisory: OSV:GHSA-JJFH-589G-3HJX...

am.ik.home:uaa-server (>=1.0.0, <=1.2.0), cn.chendahai:rocketmq-console-alarm (1.0.3) +69 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - am.ik.home:uaa-server =1.0.0, =3.0.1.2, =3.0.1.2, =3.0.1.2,...

cn.com.365trade.oss:xxl-job-admin (>=2.2.1_zzlh, <=2.2.1.1_zzlh), cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +23 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.22.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.com.365trade.oss:xxl-job-admin =2.2.1zzlh, =a.1.1.1,...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.0.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.0.release) +123 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.16.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway...

com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +3 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.0.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.ebay:lightning-client 0.9.0 - com.ebay:lightning-core 0.9...

com.battcn:spring-cloud-swagger-server (>=1.0.1-release, <=1.0.4-release), com.cedarsoft:spring (>=8.4.0, <=8.7.0) +631 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.8.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.battcn:spring-cloud-swagger-server =1.0.1-release, =8.4.0...

org.springframework.boot:spring-boot-docs (1.1.12.release), org.springframework.boot:spring-boot-starter-actuator (1.1.12.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.12.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.12.release -...

com.hotels:waggle-dance-api (>=2.0.0, <=2.1.0), com.netflix.genie:genie-app (>=3.0.0-rc.26, <=3.0.11) +14 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.8.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.hotels:waggle-dance-api =2.0.0, =3.0.0-rc.26, =3.0.0-rc.2...

com.revinate:henicea (>=1.0.0, <=1.1.2), de.codecentric:spring-boot-starter-batch-web (1.3.5.release) +23 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.4.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.revinate:henicea =1.0.0, =0.15.4, =0.15.4, =0.15.4,...

am.ik.home:uaa-server (1.9.0), br.jus.stf.digital:core (>=2.0.0, <=2.3.1) +328 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - am.ik.home:uaa-server 1.9.0 - br.jus.stf.digital:core =2.0.0,...

club.zhcs:axe-sigar (>=1.0, <=1.1), cn.springcloud.gray:spring-cloud-bamboo (>=1.0.0, <=1.0.2) +291 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.4.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - club.zhcs:axe-sigar =1.0, =1.0.0, =a.1.0.0, =a.1.0.0, =a.1.0....

GHSA-JJFH-589G-3HJX Spring Boot Actuator denial of service vulnerability

In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring M...