SpringBoot Vulnerabilities
37 vulnerabilities related to SpringBoot
- PoC2026-05-09springboot-httpexchanges: Detects Springboot HTTP Exchanges Actuator
- PoC2026-01-24springboot-x-application-context: Spring Boot `X-Application-Context` Header Exposure
- 2025-09-01springboot-actuator-unauth: Springboot Actuator Unauth
- PoC2025-08-01CVE-2025-46822: Java-springboot-codebase 1.1 - Arbitrary File Read
- PoC2025-08-01springboot-h2-db-rce: Spring Boot H2 Database RCE
- PoC2025-08-01hikvision-env: Hikvision Springboot Env Actuator - Detect
- PoC2025-08-01springboot-autoconfig: Detect Springboot autoconfig Actuator
- PoC2025-08-01springboot-beans: Detect Springboot Beans Actuator
- PoC2025-08-01springboot-caches: Springboot Actuator Caches
- PoC2025-08-01springboot-conditions: Detect Springboot Conditions Actuator
- PoC2025-08-01springboot-configprops: Detect Springboot Configprops Actuator
- PoC2025-08-01springboot-dump: Detect Springboot Dump Actuator
- PoC2025-08-01springboot-env: Springboot Env Actuator - Detect
- PoC2025-08-01springboot-features: Detects Springboot Features Actuator
- PoC2025-08-01springboot-gateway: Detect Spring Gateway Actuator
- PoC2025-08-01springboot-httptrace: Detect Springboot httptrace
- PoC2025-08-01springboot-integrationgraph: Springboot Actuator integrationgraph
- PoC2025-08-01springboot-jolokia: Detects Springboot Jolokia Actuator
- PoC2025-08-01springboot-liquidbase: Springboot Liquidbase API
- PoC2025-08-01springboot-loggers: Springboot Loggers - Exposure
- PoC2025-08-01springboot-mappings: Detect Springboot Mappings Actuator
- PoC2025-08-01springboot-metrics: Springboot Actuator Metrics - Exposure
- PoC2025-08-01springboot-startup: Springboot Actuator startup
- PoC2025-08-01springboot-threaddump: Detect Springboot Thread Dump page
- PoC2025-08-01springboot-trace: Detect Springboot Trace Actuator
- 2025-06-30X-SpringBoot 路径遍历漏洞
- 2024-12-09SpringBootCms 远程代码执行漏洞
- 2024-07-02SpringBoot jolokia logback 任意代码执行漏洞
- 2023-12-21SpringBoot spring.main.sources 属性存在远程命令执行
- 2023-12-21SpringBoot logging.config 属性存在远程命令执行
- 2023-12-21SpringBoot h2 database 远程命令执行
- 2023-11-27SpringBoot Actuator heapdump 端点敏感信息泄露
- 2023-11-27SpringBoot Actuator shutdown 端点未授权访问
- 2023-11-27SpringBoot Actuator Jolokia 端点未授权访问
- 2023-06-12SpringBoot Actuator SnakeYAML 远程命令执行
- 2021-03-15SpringBoot Actuator env 端点敏感信息泄露
- 2021-01-19SpringBoot druid数据库监控index.html-未授权访问