Skip to content
OpenAdvisories

Archive

19 November 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.6
    CVE-2021-22053 Public exploit EPSS 13%

    Code injection in spring-cloud-netflix-hystrix-dashboard

    Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-…