Description
Spring Actuator 未授权访问漏洞，泄露了网站敏感信息
Spring Actuator 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/602691208
https://www.cnblogs.com/wsx2019/p/17453170.html
https://developer.aliyun.com/article/1079170
https://blog.csdn.net/weixin_39190897/article/details/136245568
https://www.nowcoder.com/discuss/396603397997162496
https://www.wangsu.com/news/content/blog/3741
https://cloud.tencent.com/developer/article/2070446
https://github.com/rabbitmask/SB-Actuator
https://zone.huoxian.cn/d/738-spring-boot
https://rivers.chaitin.cn/blog/cq940510lnechd242kvg
https://comate.baidu.com/zh/page/nm7750vyl7i
https://www.secevery.com/toAticleInfo?id=e4f20aebaa4ae0a4a3d010380f5fc35f
https://apifox.com/apiskills/how-to-use-spring-boot-actuator-2/
https://r0yanx.com/2020/06/05/Spring-Boot-Actuators%E6%9C%AA%E6%8E%88%E6%9D%83GetShell/
https://www.yisu.com/zixun/729033.html
https://www.wiz.io/blog/spring-boot-actuator-misconfigurations
https://docs.stackhawk.com/vulnerabilities/40042/
https://www.invicti.com/web-application-vulnerabilities/spring-boot-actuator
https://www.acunetix.com/vulnerabilities/web/spring-boot-misconfiguration-all-spring-boot-actuator-endpoints-are-web-exposed/