Security Advisory
CVE-2025-48927
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.