Spring-boot-actuator-logview Project Spring-boot-actuator-logview — known CVE vulnerabilities

Every CVE whose affected-product data names Spring-boot-actuator-logview Project Spring-boot-actuator-logview, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-21234 — CVSS 7.7 (high): spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package…
• CVE-2023-29986 — CVSS 5.3 (medium): spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view.