Lucene search
+L

5 matches found

osv_ghsa
osv_ghsa
•added 2026/07/02 8:31 p.m.•21 views

GHSA-227R-JM2G-7CP4 Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission

Summary All Steeltoe actuator endpoints default to EndpointPermissions.Restricted, which is mapped to Cloud Foundry's readbasicdata permission granted to Space Auditors and similar low-trust roles. Sensitive actuators including heap dump, environment, and thread dump do not raise this to...

6.5CVSS5.8AI score0.00402EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/07/02 8:31 p.m.•29 views

Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission

Summary All Steeltoe actuator endpoints default to EndpointPermissions.Restricted, which is mapped to Cloud Foundry's readbasicdata permission granted to Space Auditors and similar low-trust roles. Sensitive actuators including heap dump, environment, and thread dump do not raise this to...

6.5CVSS5.8AI score0.00402EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
•added 2026/07/02 12:00 a.m.•32 views

PT-2026-55342

Summary All Steeltoe actuator endpoints default to EndpointPermissions.Restricted, which is mapped to Cloud Foundry's read basic data permission granted to Space Auditors and similar low-trust roles. Sensitive actuators including heap dump, environment, and thread dump do not raise this to...

6.5CVSS5.8AI score0.00402EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/06/17 9:46 p.m.•21 views

CVE-2026-50201 Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Management.Endpoint prior to version 4.2.0 and Steeltoe.Management.EndpointCore prior to version 3.4.0, all Steeltoe actuator endpoints default to...

6.5CVSS5.9AI score0.00402EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/17 9:46 p.m.•20 views

CVE-2026-50201 Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission

Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. In Steeltoe.Management.Endpoint prior to version 4.2.0 and Steeltoe.Management.EndpointCore prior to version 3.4.0, all Steeltoe actuator endpoints default to...

6.5CVSS5.9AI score0.00402EPSS
SaveExploits0References3
Rows per page
Query Builder