Skip to content
OpenAdvisories

Package · Maven

org.springframework.boot:spring-boot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-22235 Public exploit

    Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

    EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Securit…

    Spring Spring Boot libspring-java org.springframework.boot:spring-boot Ubuntu Maven
  • High 7.8
    CVE-2022-27772 Public exploit

    Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

    spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only…

    org.springframework.boot:spring-boot Maven