漏洞描述
SpringBoot Actuator shutdown 端点未授权访问，通过shutdown 端口可以将应用关闭。
SpringBoot Actuator shutdown 端点未授权访问
PoC代码
暂无相关漏洞推荐
- springboot-actuator-unauth: Springboot Actuator Unauth
- POC CVE-2021-21234: Spring Boot Actuator Logview Directory Traversal
- POC CVE-2025-34026: Versa Concerto Actuator Endpoint - Authentication Bypass
- POC CVE-2021-21234: Spring Boot Actuator Logview Directory Traversal
- POC gcloud-vertexai-idle-shutdown: Idle Shutdown Not Enabled for Vertex AI Notebooks
- POC remote-system-shutdown: Remote System Forced Shutdown Privilege Check
- POC shutdown-without-logon: Shutdown Without Logon Check
- POC shutdown-without-logon-allowed: System Allows Shutdown Without Logging On
- POC hikvision-env: Hikvision Springboot Env Actuator - Detect
- POC springboot-autoconfig: Detect Springboot autoconfig Actuator
- POC springboot-beans: Detect Springboot Beans Actuator
- POC springboot-caches: Springboot Actuator Caches
- POC springboot-conditions: Detect Springboot Conditions Actuator