Описание
Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.
EPSS
Процентиль: 13%
0.00043
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-1188
Связанные уязвимости
CVSS3: 5.3
github
7 месяцев назад
Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint
EPSS
Процентиль: 13%
0.00043
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-1188