Skip to content
OpenAdvisories

Package · Maven

org.springframework.boot:spring-boot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2026-40973

    Spring Boot accepts predictable temp directory without ownership verification

    A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `true` and the attack persists across application restarts, this may allow the atta…

    Spring Spring Boot org.springframework.boot:spring-boot Maven
  • High 7.3
    CVE-2025-22235 Public exploit

    Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

    EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Securit…

    Spring Spring Boot libspring-java org.springframework.boot:spring-boot Ubuntu Maven
  • High 7.8
    CVE-2022-27772 Public exploit

    Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

    spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only…

    org.springframework.boot:spring-boot Maven