Miggo Logo
Miggo Vulnerability Database
→
CVE-2023-38286

CVE-2023-38286:
Spring-boot-admin sandbox bypass via crafted HTML

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2023-38286
GHSA ID
GHSA-7gj7-224w-vpr3
EPSS Score
0.28007%
CWE
CWE-77
Published
7/14/2023
Updated
6/12/2024
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
de.codecentric:spring-boot-admin-servermaven>= 3.0.0, < 3.1.23.1.2
de.codecentric:spring-boot-admin-servermaven< 2.7.162.7.16

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The analysis focused on the changes made to the mailNotifierTemplateEngine function in AdminServerNotifierAutoConfiguration, which directly relates to how templates are processed for mail notifications. The change from SpringResourceTemplateResolver to ClassLoaderTemplateResolver is a key mitigation step, indicating the original configuration was potentially vulnerable.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

T*ym*l*** t*rou** *.*.*.R*L**S* *s us** in sprin*-*oot-**min (*k* Sprin* *oot **min) t*rou** *.*.* *llows *or * s*n**ox *yp*ss vi* *r**t** *TML. T*is m*y ** r*l*v*nt *or SSTI (S*rv*r Si** T*mpl*t* Inj**tion) *n* *o** *x**ution in sprin*-*oot-**min i*

Reasoning

T** *n*lysis *o*us** on t** ***n**s m*** to t** m*ilNoti*i*rT*mpl*t**n*in* *un*tion in **minS*rv*rNoti*i*r*uto*on*i*ur*tion, w*i** *ir**tly r*l*t*s to *ow t*mpl*t*s *r* pro**ss** *or m*il noti*i**tions. T** ***n** *rom Sprin*R*sour**T*mpl*t*R*solv*r