CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-05-28
TeleMessage Service Spring Boot Actuator Heap Dump (/heapdump) Exposure Information Disclosure Vulnerability (CVE-2025-48927)
[Affected Scope] TeleMessage service deployments through 2025-05-05
[Impact] Unauthenticated remote attackers can download the JVM heap dump via the exposed /heapdump endpoint, leading to the extraction of sensitive credentials, API keys, and user data from memory
[Mitigation] Disable the heapdump Actuator endpoint immediately, restrict external access via reverse proxies/WAFs, and rotate all potentially compromised credentials