Spring-boot-actuator-logview Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Spring-boot-actuator-logview Project records in CISA KEV

No Spring-boot-actuator-logview Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Spring-boot-actuator-logview · all components

TI-2021-04337 CVE-2021-21234 · GHSA-p4q6-qxjx-8jgp

MEDIUM 53

spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.21173 Published 2021-01-05 Fixed in 0.2.13 CWE-22

TI-2023-14100 CVE-2023-29986 · GHSA-2fr8-8x69-5vrv

LOW 31

spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00749 Published 2023-05-11 No fix listed CWE-22