Description
Actuator是Spring Boot提供的服务监控和管理中间件，默认配置会出现接口未授权访问，导致敏感信息泄露，部分接口还会泄露网站流量信息和内存信息等
SpringBoot Actuator env 端点敏感信息泄露
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.wangsu.com/news/content/blog/3741
https://blog.csdn.net/JHIII/article/details/126601858
https://comate.baidu.com/zh/page/imnmm1rh6ca
https://zhuanlan.zhihu.com/p/602691208
https://github.com/pig-mesh/pig/issues/977
https://zone.huoxian.cn/d/2924-spring-boot
https://www.cnkirito.moe/spring-boot-actuator-notes/
https://www.cnblogs.com/shamo89/p/17988088
https://rivers.chaitin.cn/blog/cqguunh0lne7jdu9ufk0
https://blog.zgsec.cn/archives/129.html
https://cloud.tencent.com/developer/article/1816814
https://cametom006.medium.com/how-i-found-and-bypassed-a-spring-boot-actuator-information-disclosure-bug-c4930b740a50
https://www.wiz.io/blog/spring-boot-actuator-misconfigurations
https://c4ng4c31r0.medium.com/sensitive-information-disclosure-via-spring-boot-default-paths-74f60f5d4a84
https://docs.escape.tech/documentation/reference/vulnerabilities/springboot_actuator_env/
https://hacktricks.wiki/en/network-services-pentesting/pentesting-web/spring-actuators.html
https://www.acunetix.com/vulnerabilities/web/spring-boot-actuator/