Submit #623478: zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosureinfo

Titelzlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosure
BeschreibungIn the latest version 6.0.0, all microservices' Spring Actuator interfaces have no access control whatsoever, allowing any user to access and obtain various configurations, environment variables, and other sensitive information of the corresponding services.
Quelle⚠️ https://github.com/zlt2000/microservices-platform/issues/79
Benutzer
 ZAST.AI (UID 87884)
Einreichung26.07.2025 18:25 (vor 9 Monaten)
Moderieren08.08.2025 10:23 (13 days later)
StatusAkzeptiert
VulDB Eintrag319234 [zlt2000 microservices-platform bis 6.0.0 Spring Actuator Interface /actuator Information Disclosure]
Punkte17

Interested in the pricing of exploits?

See the underground prices here!