| Название | zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosure |
|---|
| Описание | In the latest version 6.0.0, all microservices' Spring Actuator interfaces have no access control whatsoever, allowing any user to access and obtain various configurations, environment variables, and other sensitive information of the corresponding services.
|
|---|
| Источник | ⚠️ https://github.com/zlt2000/microservices-platform/issues/79 |
|---|
| Пользователь | ZAST.AI (UID 87884) |
|---|
| Представление | 26.07.2025 18:25 (9 месяцы назад) |
|---|
| Модерация | 08.08.2025 10:23 (13 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 319234 [zlt2000 microservices-platform до 6.0.0 Spring Actuator Interface /actuator раскрытие информации] |
|---|
| Баллы | 17 |
|---|