Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-53602

Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.

VectorNETWORK

PublishedJul 04, 2025, 21:15

Published Bycve@mitre.org

Base Score

Score5.3

Package (Ecosystem)IntroducedFixedLimit

io.zipkin:zipkin-server(Maven)0N/AN/A

CWE-1188

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK