7 matches found
CVE-2021-21234
CVE-2021-21234 Vulnerabilidad de directory traversal en la librería spring-boot-actuator-logview https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...
CVE-2021-21234
CVE-2021-21234 CVE-2021-21234 Spring Boot Directory Traversal spring-boot-actuator-logview adiciona um visualizador simples de arquivos de log como um endpoint do actuator do Spring Boot em uma biblioteca. É o pacote maven "eu.hinsch:spring-boot-actuator-logview". Existe uma vulnerabilidade de...
Path Traversal
spring-boot-actuator-logview is vulnerable to Path Traversal. The vulnerability exists in the securityCheck function of LogViewEndpoint.java because it does not properly validate relative paths, allowing an attacker to access files outside the expected directory through the path such as /usr/outn...
CVE-2023-29986
spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view...
Directory traversal
spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view...
CVE-2023-29986
CVE-2023-29986 affects spring-boot-actuator-logview 0.2.13. The vulnerability is a Directory Traversal through LogViewEndpoint.view, enabling access to files outside the intended directory due to insufficient input validation. Documents indicate risk is a filesystem path traversal to sibling dire...
