CyberRota Analysis
AI-GeneratedSpring Boot Admin Server versions prior to 4.1.2 are vulnerable to a server-side request forgery (SSRF) that enables unauthenticated attackers to register malicious instances using unvalidated healthUrl and managementUrl parameters. This flaw allows attackers to make HTTP requests to internal addresses, potentially exfiltrating sensitive cloud credentials. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access to internal resources.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can force the server to make HTTP requests to arbitrary internal addresses and retrieve response bodies via the actuator proxy to exfiltrate cloud credentials.