CVE-2023-38286
Last modified
CVE-2023-38286 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.. EPSS estimates a 0.88% chance of exploitation in the next 30 days.
Description
Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Codecentric | Spring Boot Admin | <= 3.1.0 |
| Thymeleaf | Thymeleaf | <= 3.1.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-38286?
How severe is CVE-2023-38286?
How do I fix CVE-2023-38286?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-38276IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes se…7.5
- CVE-2023-3828A vulnerability was found in Bug Finder Listplace Directory …6.1
- CVE-2023-38280IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1…7.8
- CVE-2023-38281IBM Cloud Pak System does not set the secure attribute on au…5.3
- CVE-2023-38283In OpenBGPD before 8.1, incorrect handling of BGP update dat…5.3
- CVE-2023-38285Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algo…7.5
- CVE-2023-38288Rejected reason: Not a Security Issue.
- CVE-2023-38289Rejected reason: Not a Security Issue.
- CVE-2023-3829A vulnerability was found in Bug Finder ICOGenie 1.0. It has…6.1
- CVE-2023-38290Certain software builds for the BLU View 2 and Sharp Rouvo V…7.8
- CVE-2023-38291An issue was discovered in a third-party component related t…7.1
- CVE-2023-38292Certain software builds for the TCL 20XE Android device cont…8.7
Are you affected by CVE-2023-38286?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST