Description
SpringBoot Actuator Jolokia 端点未授权访问
SpringBoot Actuator Jolokia 端点未授权访问
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/m0_74823524/article/details/145272713
https://cloud.tencent.com/developer/article/2070446
https://www.cnblogs.com/junsec/p/12066305.html
https://zhuanlan.zhihu.com/p/407710777
https://blog.51cto.com/u_15127593/4036234
https://zone.huoxian.cn/d/250-spring-actuatorjolokiarce
https://github.com/mpgn/Spring-Boot-Actuator-Exploit
https://beaglesecurity.com/blog/vulnerability/spring-boot-actuators-xxe.html
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Spring%20Boot/Spring%20Boot%20Actuator%20jolokia%20%E9%85%8D%E7%BD%AE%E4%B8%8D%E5%BD%93%E5%AF%BC%E8%87%B4%E7%9A%84rce%E6%BC%8F%E6%B4%9E/