1 matches found
Spring Boot: Spring Boot: Remote code execution via timing attack in DevTools remote secret comparison
A flaw was found in Spring Boot. An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about a remote secret. In extreme circumstances, this could allow the attacker to determine the secret and upload changed classes, leading to...
7.5CVSS6.2AI score0.00262EPSS
SaveExploits0References5
20