CVE-2025-48927

Publication date

2025-05-28 00:00:00

Family

mitre

State

PUBLISHED

Description

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.