cbcvebase.

Lukashinsch Spring-Boot-Actuator-Logview vulnerabilities

1 known vulnerability affecting lukashinsch/spring-boot-actuator-logview.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-21234P1HIGHCVSS 7.7ExploitedPoCfixed in 0.2.132021-01-05
CVE-2021-21234 [HIGH] CWE-22 CVE-2021-21234: spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin (spring boot
nvd
Lukashinsch Spring-Boot-Actuator-Logview vulnerabilities | cvebase