Applications using both spring-cloud-netflix-hystrix-dashboard
and spring-boot-starter-thymeleaf
expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;[user-provided data]
, the path elements following hystrix/monitor
are being evaluated as SpringEL expressions, which can lead to code execution.
[
{
"product": "Spring Cloud Netflix",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Spring Cloud Netflix versions 2.2.x prior to 2.2.10.Release + and old unsupported versions"
}
]
}
]