Skip to content
OpenAdvisories

Product · Spring

Spring Boot

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-22235 Public exploit

    Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

    EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be affected by this if all the following conditions are met: * You use Spring Securit…

    Spring Spring Boot libspring-java org.springframework.boot:spring-boot Ubuntu Maven