Skip to content

Product

de.codecentric/spring-boot-admin-server vulnerabilities

1 published CVE affecting de.codecentric/spring-boot-admin-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest de.codecentric/spring-boot-admin-server CVEs

Newest publication first

  1. CVE-2023-38286 Spring-boot-admin sandbox bypass via crafted HTML

    Published
    HighCVSS 7.5

    Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.