Skip to content
OpenAdvisories

Product · codecentric

spring-boot-admin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-62242

    Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

    Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges…

    codecentric spring-boot-admin
  • High 8.1
    CVE-2022-46166 Public exploit

    Spring Boot Admins integrated notifier support allows arbitrary code execution

    Spring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers (e.g. Teams-Notifier) and write access to environment variables via UI are affe…

    codecentric spring-boot-admin de.codecentric:spring-boot-admin Maven