Lucene search
Veracode Vulnerability DatabaseVERACODE:38435HistoryDec 12, 2022 - 5:38 a.m.
Remote Code Injection
2022-12-1205:38:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
code injection
input validation
remote access
environment variables
software vulnerability
0.003 Low
EPSS
Percentile
70.2%
de.codecentric:spring-boot-admin is vulnerable to remote code injection. The vulnerability exists due to improper validation of user inputs, which allows an attacker to inject and execute malicious code on the system when Notifiers and write access to environment variables are enabled via the UI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spring boot admin | le | 2.6.9 | |
| spring boot admin | le | 2.7.7 | |
| spring boot admin | le | 2.6.9 | |
| spring boot admin | le | 2.7.7 |
Related
f5
f5
K000134945 : Spring Boot vulnerability CVE-2022-46166
2023-06-07 00:00:00
osv
osv
CVE-2022-46166
2022-12-09 21:15:14
github
github
cve
cve
CVE-2022-46166
2022-12-09 21:15:14
githubexploit
githubexploit
Exploit for Code Injection in Codecentric Spring Boot Admin
2023-02-10 09:06:34
prion
prion
Design/Logic Flaw
2022-12-09 21:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-46166
2022-12-09 21:15:14