com.jdcloud.jdsf:spring-cloud-jdsf-core (1.0.0-edgware), com.taboola:async-profiler-actuator-endpoint (>=0.0.2, <=2.0.8) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.20.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.jdcloud.jdsf:spring-cloud-jdsf-core 1.0.0-edgware -...

com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway (1.5.1.release), com.alibaba.cloud:spring-cloud-starter-bus-rocketmq (1.5.1.release) +41 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.21.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.alibaba.cloud:spring-cloud-alibaba-sentinel-gateway...

cn.com.365trade.oss:xxl-job-admin (>=2.2.1_zzlh, <=2.2.1.1_zzlh), cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +23 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.22.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.com.365trade.oss:xxl-job-admin =2.2.1zzlh, =a.1.1.1,...

ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +7126 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=2.0.0.release, <=2.7.17)

org.springframework.boot:spring-boot-actuator MAVEN version =2.0.0.release, =0.1.2, =0.5.0, =0.5.21, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2023-34055 Source advisory:...

ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.2, <=0.2.0), ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24) +7126 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=2.0.0.release, <=2.7.17)

org.springframework.boot:spring-boot-actuator MAVEN version =2.0.0.release, =0.1.2, =0.5.0, =0.5.21, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2023-34055 Source advisory:...

am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5), cc.vihackerframework:vihacker-auth-starter (1.0.8.r) +978 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.0.0, <=3.0.12)

org.springframework.boot:spring-boot-actuator MAVEN version =3.0.0, =0.1.0, =1.0.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2023-34055 Source advisory: OSV:GHSA-JJFH-589G-3HJX...

am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5), cc.vihackerframework:vihacker-auth-starter (1.0.8.r) +978 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.0.0, <=3.0.12)

org.springframework.boot:spring-boot-actuator MAVEN version =3.0.0, =0.1.0, =1.0.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2023-34055 Source advisory: GHSA-JJFH-589G-3HJX...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-application (2.12.0), be.vlaanderen.informatievlaanderen.vsds:ldes-fragmentisers (>=1.1.0, <=3.4.0) +1437 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.1.0, <=3.1.5)

org.springframework.boot:spring-boot-actuator MAVEN version =3.1.0, =1.1.0, =2.3.0, =1.1.0, =1.1.0, =2.10.0, =1.1.0, =1.1.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.6.0, =3.6.1 - be.vlaanderen.informatievlaanderen...

be.vlaanderen.informatievlaanderen.ldes.ldio:ldio-application (2.12.0), be.vlaanderen.informatievlaanderen.vsds:ldes-fragmentisers (>=1.1.0, <=3.4.0) +1437 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.1.0, <=3.1.5)

org.springframework.boot:spring-boot-actuator MAVEN version =3.1.0, =1.1.0, =2.3.0, =1.1.0, =1.1.0, =2.10.0, =1.1.0, =1.1.0, =2.3.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.6.0, =3.6.1 - be.vlaanderen.informatievlaanderen...

org.springframework.boot:spring-boot-docs (1.0.0.release), org.springframework.boot:spring-boot-starter-actuator (1.0.0.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.0.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.0.0.release -...

com.github.robertnetz:dogstatsd-spring-boot-starter (1.2), com.ixortalk:ixortalk-image-service (>=0.0.1, <=0.0.8) +90 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.18.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.github.robertnetz:dogstatsd-spring-boot-starter 1.2 -...

org.springframework.boot:spring-boot-docs (1.1.2.release), org.springframework.boot:spring-boot-starter-actuator (1.1.2.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.2.release -...

org.springframework.boot:spring-boot-docs (1.1.10.release), org.springframework.boot:spring-boot-starter-actuator (1.1.10.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.10.release -...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.7.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 -...

com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1), de.codecentric:spring-boot-admin-sample (>=1.1.0, <=1.1.1) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.bushidowallet:bushido-wallet-service =1.0.0, =1.1.0,...

org.springframework.boot:spring-boot-docs (1.1.1.release), org.springframework.boot:spring-boot-starter-actuator (1.1.1.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.1.release -...

de.codecentric:spring-boot-starter-batch-web (>=1.2.0.release, <=1.2.2.release), io.fabric8:process-spring-boot-container (>=1.2.0.beta1, <=1.2.0.beta3) +7 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.5.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - de.codecentric:spring-boot-starter-batch-web =1.2.0.release,...

CVE-2023-34055

In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring M...

Design/Logic Flaw

In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring M...

Design/Logic Flaw

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...