CVE-2021-21234

creationtimestamp| type| source ---|---|--- 2021-01-05 20:52:47+00:00| seen| https://t.me/cibsecurity/21594 2021-12-01 09:38:28+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1252 2021-12-01 12:29:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4876...

CVE-2021-21234

CVE-2021-21234 affects the Spring Boot Actuator Logview library (eu.hinsch:spring-boot-actuator-logview). Before version 0.2.13, there is a directory traversal vulnerability exposed by the actuator logviewer endpoint, where both the filename parameter and the base directory can be manipulated (ba...