| 标题 | zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Information Disclosure |
|---|
| 描述 | In the latest version 6.0.0, all microservices' Spring Actuator interfaces have no access control whatsoever, allowing any user to access and obtain various configurations, environment variables, and other sensitive information of the corresponding services.
|
|---|
| 来源 | ⚠️ https://github.com/zlt2000/microservices-platform/issues/79 |
|---|
| 用户 | ZAST.AI (UID 87884) |
|---|
| 提交 | 2025-07-26 18時25分 (1 年前) |
|---|
| 管理 | 2025-08-08 10時23分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 319234 [zlt2000 microservices-platform 直到 6.0.0 Spring Actuator Interface /actuator 信息公开] |
|---|
| 积分 | 17 |
|---|