WID-SEC-W-2025-0887

DeutschShown in its original language — a full translation is planned for a future version.

VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

view advisory published 2025-04-24

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder nicht näher beschriebene Auswirkungen zu erzielen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-22235US	—OT elevated	0.43% (37th)	Exploit	2025-04-28
EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed. Your application may be af…

references

External citations — patches, advisories, analysis.

Atlassian Security Bulletin - November 18 2025external
Spring Boot Release Notes vom 2025-04-24external
Spring Security Advisory CVE-2025-22235 vom 2025-04-24external
WID-SEC-W-2025-0887 - CSAF Versionself
WID-SEC-2025-0887 - Portal Versionself
IBM Security Bulletin 7252567 vom 2025-11-26external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan