Skip to content
OpenAdvisories

Archive

9 December 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2022-46166 Public exploit

    Spring Boot Admins integrated notifier support allows arbitrary code execution

    Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers (e.g. Teams-Notifier) and write access to environment variables via UI are affe…

  • Medium 5.4
    CVE-2022-25630 Public exploit

    An authenticated user can embed malicious content with XSS into the admin group policy page.