Описание
Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint
Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.
Пакеты
Наименование
io.zipkin:zipkin-server
maven
Затронутые версииВерсия исправления
<= 3.5.1
Отсутствует
Связанные уязвимости
CVSS3: 5.3
nvd
7 месяцев назад
Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.