CVE-2025-8738: falha de média gravidade em zlt2000 microservices-platform
zlt2000 microservices-platform Spring Actuator Interface actuator information disclosure
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /actuator of the component Spring Actuator Interface. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
zlt2000 · microservices-platformCVEs relacionadas — zlt2000 microservices-platform
No mesmo produto, das mais perigosas para as menos.
CVE-2026-92466HIGHmicroservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission CheckingEPSS 0.9%CVE-2026-92469HIGHmicroservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership CheckEPSS 0.5%CVE-2026-92468HIGHmicroservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerEPSS 0.5%CVE-2026-92467HIGHmicroservices-platform through 6.0.0 Unverified Password Change via /users/passwordEPSS 0.5%CVE-2025-8841MEDIUMzlt2000 microservices-platform FileController.java upload unrestricted uploadEPSS 0.3%CVE-2025-8737MEDIUMzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirectEPSS 0.3%