Spring Boot Misconfiguration: Developer tools enabled on production
Severity:
Medium
Summary
Invicti detected that the web application is running with spring-boot-devtools enabled. Spring Boot includes an additional set of tools that can make the application development experience a little more pleasant. The spring-boot-devtools module can be included in any project to provide additional development-time features.
Impact
Enabling spring-boot-devtools on a remote application is a security risk. You should never enable support on a production deployment.
Remediation
Required Skills for Successful Exploitation
Actions To Take
It's recommended to disable spring-boot-devtools. This can be done by removing the spring-boot-devtools dependency from your build automation tool configuration file.
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
