Maven package
de.codecentric/spring-boot-admin-server
pkg:maven/de.codecentric/spring-boot-admin-server
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-38286 | — | >= 3.0.0, < 3.1.2 | 3.1.2 | Jul 14, 2023 | Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier i |
- CVE-2023-38286Jul 14, 2023affected >= 3.0.0, < 3.1.2fixed 3.1.2
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier i