What’s Vulnerable › Vulnerabilities

CVE-2023-38286

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-07-14 · updated 2026-06-17
• Weakness: CWE-77

Description

Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-admin if MailNotifier is enabled and there is write access to environment variables via the UI.

Affected products

• codecentric spring-boot-admin: through 3.1.0
• thymeleaf: through 3.1.1

References

• https://github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI
• https://github.com/p1n93r/SpringBootAdmin-thymeleaf-SSTI

Get alerted when CVE-2023-38286 or the next vulnerability affects your stack