codecentric__spring-boot-admin_CVE-2022-46166_2-6-9

codecentric の Spring Boot Admin このコミュニティプロジェクトは、Spring Boot ® アプリケーション用の管理インターフェースを提供します。 Python アプリケーションの監視は、Pyctuator を使用して行うことができます。 Spring Boot Admin は、登録されたアプリケーションに対して次の機能を提供します: ヘルスステータスを表示 次のような詳細を表示...

CVE-2022-46166

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...

CVE-2022-46166

The CVE affects Spring Boot Admins with Spring Boot Admin Server where Notifiers (e.g., Teams-Notifier) are enabled and users have write access to environment variables via the UI. The root cause involves potential code execution via the /env actuator endpoint, enabling an attacker to inject or e...

CVE-2022-46166 Spring Boot Admins integrated notifier support allows arbitrary code execution

Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers e.g. Teams-Notifier and write access to environment variables via UI are affected. Users are advised to upgrade to th...