Lucene search
Veracode Vulnerability DatabaseVERACODE:28903HistoryJan 06, 2021 - 6:00 a.m.
Directory Traversal
2021-01-0606:00:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.964 High
EPSS
Percentile
99.6%
spring-boot-actuator-logview is vulnerable to directory traversal. The vulnerability exists through the base folder parameter exposed in the log file directory through admin HTTP endpoints.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring-boot-actuator-logview | le | 0.2.12 |
References
github.com/lukashinsch/spring-boot-actuator-logview/commit/1c76e1ec3588c9f39e1a94bf27b5ff56eb8b17d6
github.com/lukashinsch/spring-boot-actuator-logview/commit/760acbb939a8d1f7d1a7dfcd51ca848eea04e772
github.com/lukashinsch/spring-boot-actuator-logview/security/advisories/GHSA-p4q6-qxjx-8jgp
search.maven.org/artifact/eu.hinsch/spring-boot-actuator-logview
Related
githubexploit
githubexploit
prion
prion
Directory traversal
2021-01-05 18:15:00
github
github
Directory Traversal in spring-boot-actuator-logview
2021-01-05 17:29:40
cve
cve
CVE-2021-21234
2021-01-05 18:15:16
nuclei
nuclei
Spring Boot Actuator Logview Directory Traversal
2021-06-24 05:36:45
osv
osv
Directory Traversal in spring-boot-actuator-logview
2021-01-05 17:29:40
CVE-2021-21234
2021-01-05 18:15:16
cvelist
cvelist
CVE-2021-21234 Directory Traversal
2021-01-05 17:30:15
nvd
nvd
CVE-2021-21234
2021-01-05 18:15:16