Gửi #623478: zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosurethông tin

tiêu đềzlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosure
Mô tảIn the latest version 6.0.0, all microservices' Spring Actuator interfaces have no access control whatsoever, allowing any user to access and obtain various configurations, environment variables, and other sensitive information of the corresponding services.
Nguồn⚠️ https://github.com/zlt2000/microservices-platform/issues/79
Người dùng
 ZAST.AI (UID 87884)
Đệ trình26/07/2025 18:25 (cách đây 1 Năm)
Kiểm duyệt08/08/2025 10:23 (13 days later)
Trạng tháiđược chấp nhận
Mục VulDB319234 [zlt2000 microservices-platform đến 6.0.0 Spring Actuator Interface /actuator tiết lộ thông tin]
điểm17

Interested in the pricing of exploits?

See the underground prices here!