References https://blog.csdn.net/JustDI0209/article/details/134206920 https://comate.baidu.com/zh/page/mgooqw3hr9v https://techzhi.com/60.htm https://stack.chaitin.com/techblog/detail/288 https://developer.baidu.com/article/details/2780028 https://github.com/spring-cloud/spring-cloud-netflix/issues/3637 https://cloud.baidu.com/article/2805221 https://blog.csdn.net/qq_18980147/article/details/128041932 https://engineering.backbase.com/2023/05/16/hacking-netflix-eureka/ https://www.cnblogs.com/hei-zi/p/14339945.html
Related VulnerabilitiesSpringBlade /api/blade-log/api/list SQL 注入漏洞SpringBlade /api/blade-user/list SQL 注入漏洞Spring Actuator 未授权访问漏洞PoCspringboot-sbom: Spring Boot Actuator SBOM - ExposurePoCCVE-2025-41242: Spring Framework - Path TraversalPoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges ActuatorPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPentaho /pentaho/j_spring_security_check 默认口令漏洞PoCCVE-2026-22739: Spring Cloud Config Server - Path TraversalPoCspringboot-x-application-context: Spring Boot `X-Application-Context` Header ExposureSpring Framework路径遍历漏洞(CVE-2024-38819)Spring Cloud Gateway SpEL 表达式注入漏洞