am.ik.access-logger:access-logger (>=0.1.0, <=0.1.5), cc.vihackerframework:vihacker-auth-starter (1.0.8.r) +979 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (>=3.0.0, <=3.0.12)

org.springframework.boot:spring-boot-actuator MAVEN version =3.0.0, =0.1.0, =1.0.0, =3.0.1.0, =3.0.4.0 and more Source cves: CVE-2023-34055 Source advisory: OSV:GHSA-JJFH-589G-3HJX...

Spring Boot Actuator denial of service vulnerability

In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring M...

GHSA-V94H-HVHG-MF9H Spring Framework vulnerable to denial of service

In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC or Spring WebFlux...

org.springframework.boot:spring-boot-docs (1.1.1.release), org.springframework.boot:spring-boot-starter-actuator (1.1.1.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.1.release -...

org.springframework.boot:spring-boot-docs (1.1.2.release), org.springframework.boot:spring-boot-starter-actuator (1.1.2.release) +1 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.2.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - org.springframework.boot:spring-boot-docs 1.1.2.release -...

com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1), de.codecentric:spring-boot-admin-sample (>=1.1.0, <=1.1.1) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.bushidowallet:bushido-wallet-service =1.0.0, =1.1.0,...

com.github.zed-platform:zed-panel (>=0.0.18, <=0.0.19), com.github.zed-platform:zed-service-attachment-file (>=0.0.12, <=0.0.19) +28 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.github.zed-platform:zed-panel =0.0.18, =0.0.12, =0.0.12,...

com.moelholm.tools:actuator-ui-dump (>=0.1, <=0.2), de.codecentric:spring-boot-admin-sample (1.2.4) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.7.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.moelholm.tools:actuator-ui-dump =0.1, =0.41.0, =0.41.0,...

com.netflix.spectator:spectator-web-spring (>=0.41.0, <=0.42.0), org.apache.camel:camel-example-spring-boot (>=2.16.3, <=2.16.5) +10 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.2.8.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.netflix.spectator:spectator-web-spring =0.41.0, =2.16.3,...

com.garethahealy.poms:springboot-parent (1.0.0), com.garethahealy:springboot-parent (>=1.0.7, <=1.1.1) +32 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.1.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.garethahealy.poms:springboot-parent 1.0.0 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (>=0.0.10, <=0.0.14), com.github.mthizo247:spring-cloud-netflix-zuul-websocket (>=1.0.0-release, <=1.0.5.release) +72 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

com.hotels:waggle-dance-api (>=2.0.0, <=2.1.0), com.netflix.genie:genie-app (>=3.0.0-rc.26, <=3.0.11) +14 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.3.8.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.hotels:waggle-dance-api =2.0.0, =3.0.0-rc.26, =3.0.0-rc.2...

au.com.mountain-pass:hyperstate-server (>=1, <=10), be.ordina:microservices-dashboard-server (1.0.1) +198 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - au.com.mountain-pass:hyperstate-server =1, =1.0.0-rc, =2.6.1,...

cn.patterncat:event-trace-client (1.3.0), cn.patterncat:springboot-metrics-starter (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.6.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.patterncat:event-trace-client 1.3.0 -...

com.stormpath.spring:stormpath-sdk-examples-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1), com.stormpath.spring:stormpath-zuul-spring-cloud-starter (>=1.5.0, <=1.5.1) +4 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.0.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

cn.dubby:itbus (>=0.2.7, <=0.2.8), com.cedarsoftware:n-cube (>=4.0.6, <=4.0.16) +278 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.3.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.dubby:itbus =0.2.7, =4.0.6, =2.0.2-release, =1.0.7, =1.0.7...

com.battcn:spring-cloud-swagger-server (>=1.0.1-release, <=1.0.4-release), com.cedarsoft:spring (>=8.4.0, <=8.7.0) +631 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.8.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.battcn:spring-cloud-swagger-server =1.0.1-release, =8.4.0...

cn.zhangfusheng:zfs-api-administrator-ui (1.0.2), cn.zhangfusheng:zfs-swagger-ui (1.0.2.web) +702 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.9.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - cn.zhangfusheng:zfs-api-administrator-ui 1.0.2 -...

com.alibaba.spring.boot:dubbo-spring-boot-starter (>=1.0.1, <=2.0.0), com.almis.awe:awe-annotation (>=4.1.0, <=4.1.1) +171 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.10.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.alibaba.spring.boot:dubbo-spring-boot-starter =1.0.1,...

club.zhcs:axe-sigar (>=1.5.13, <=1.5.13.2), com.github.drtrang:druid-spring-boot-actuator-autoconfigure (1.1.10) +333 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.5.13.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.5.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - club.zhcs:axe-sigar =1.5.13, =3.3.10, =3.3.10, =1.3.0,...