References https://github.com/halo-dev/halo/issues/498 https://www.wiz.io/blog/spring-boot-actuator-misconfigurations https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/spring-boot-misconfiguration-actuator-endpoint-security-disabled https://cametom006.medium.com/how-i-found-and-bypassed-a-spring-boot-actuator-information-disclosure-bug-c4930b740a50 https://docs.spring.io/spring-boot/reference/actuator/endpoints.html https://github.com/chaitin/xray/issues/35 https://arxiv.org/pdf/2411.01236 https://www.baeldung.com/spring-boot-actuators https://medium.com/@SecureWithMohit/securing-spring-boot-actuator-identification-and-mitigation-of-vulnerabilities-a8254302f3ac
Related VulnerabilitiesPoCflowise-chatflows-exposure: Flowise AI - Unauthenticated Chatflows API ExposurePoClangflow-api-exposure: Langflow - Unauthenticated API ExposurePoCCVE-2025-51683: mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCEPoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSSPoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_codePoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code InjectionPoCCVE-2026-19092: Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function InvocationPoCCVE-2026-19632: TranslatePress <= 3.3.1 - Unauthenticated Account TakeoverPoCCVE-2026-21875: ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL InjectionPoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp ProxyPoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()PoCCVE-2026-29963: HSC MailInspector - Unauthenticated Arbitrary File ReadPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal