Directory Traversal

spring-boot-actuator-logview is vulnerable to directory traversal. The vulnerability exists through the base folder parameter exposed in the log file directory through admin HTTP endpoints...

PT-2021-14346

Name of the Vulnerable Software and Affected Versions: spring-boot-actuator-logview versions prior to 0.2.13 Description: The issue concerns a directory traversal vulnerability in the spring-boot-actuator-logview library, which exposes a log file directory via admin HTTP endpoints. Both the...