Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2021-21234— Directory Traversal

Quick assessment

Affected
lukashinsch spring-boot-actuator-logview
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Lukashinsch Spring Boot Actuator Logview是Ffay（Lukashinsch）个人开发者的一个为Spring Boot提供通过Web界面查看日志功能的代码库。 spring-boot-actuator-logview 0.2.13之前版本存在路径遍历漏洞，该漏洞源于filename参数未被检查。

CVSS 7.7 · High EPSS 21.17% · P97

Public Exploits 1

Nuclei · 1 CVE-2021-21234.yaml [template]

Possible ATT&CK Techniques 1 AI

T1083 · File and Directory Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-21234

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Directory Traversal
Source: CVE Program / CVE List V5
Vulnerability Description
spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin (spring boot actuator) HTTP endpoints. Both the filename to view and a base folder (relative to the logging folder root) can be specified via request parameters. While the filename parameter was checked to prevent directory traversal exploits (so that `filename=../somefile` would not work), the base folder parameter was not sufficiently checked, so that `filename=somefile&base=../` could access a file outside the logging base directory). The vulnerability has been patched in release 0.2.13. Any users of 0.2.12 should be able to update without any issues as there are no other changes in that release. There is no workaround to fix the vulnerability other than updating or removing the dependency. However, removing read access of the user the application is run with to any directory not required for running the application can limit the impact. Additionally, access to the logview endpoint can be limited by deploying the application behind a reverse proxy.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
Lukashinsch Spring Boot Actuator Logview 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lukashinsch Spring Boot Actuator Logview是Ffay（Lukashinsch）个人开发者的一个为Spring Boot提供通过Web界面查看日志功能的代码库。 spring-boot-actuator-logview 0.2.13之前版本存在路径遍历漏洞，该漏洞源于filename参数未被检查。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
lukashinsch spring-boot-actuator-logview < 0.2.13 -

II. Public POCs for CVE-2021-21234

# POC Description Source Link Shenlong Link
1 Directory traversal vulnerability in the spring-boot-actuator-logview library https://github.com/PwCNO-CTO/CVE-2021-21234 POC Details
2 None https://github.com/xiaojiangxl/CVE-2021-21234 POC Details
3 spring-boot-actuator-logview before version 0.2.13 contains a directory traversal vulnerability in libraries that adds a simple logfile viewer as a spring boot actuator endpoint (maven package "eu.hinsch:spring-boot-actuator-logview". https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21234.yaml POC Details
4 None https://github.com/Threekiii/Awesome-POC/blob/master/%E5%BC%80%E5%8F%91%E6%A1%86%E6%9E%B6%E6%BC%8F%E6%B4%9E/Spring%20Boot%20%E7%9B%AE%E5%BD%95%E9%81%8D%E5%8E%86%20CVE-2021-21234.md POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-21234

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-21234 (2)

Vendor Advisories for CVE-2021-21234 (1)

Other References for CVE-2021-21234 (1)

IV. Related Vulnerabilities

Same weakness: CWE-22

V. Comments for CVE-2021-21234

No comments yet

Leave a comment