news.lavx.hu

Spring Boot Actuator Vulnerability in Axelix Exposes Endpoints Without JWT Authentication

A configuration oversight in the Axelix Spring Boot platform allowed unauthenticated access to Actuator endpoints when management ports were separated from main application ports. The flaw stemmed ...
cybersecuritynews

Critical Spring Security Flaw Lets Attackers Gain Admin Access to LDAP Servers

A critical vulnerability in Spring Security’s embedded UnboundID LDAP server can allow remote attackers to gain administrative access to exposed in-memory LDAP directories. Tracked as CVE-2026-59270, ...
GitHub

E-Commerce Order & Inventory Management System

A full-stack e-commerce application built with Java, Spring Boot, React, and MySQL, featuring product browsing, authentication, checkout, and order management. Create a MySQL database and configure ...
rocket-boys

Spring Boot、重大な脆弱性(CVE-2026-40976)を修正-特定条件で全エンドポイントが未認証アクセス可能に

一次情報のアドバイザリによると、問題は Spring Boot の default web security filter chain に認可ルールが入らないケースがあることに起因します。その結果、本来は保護されるべきエンドポイント群 ...