CVE-2025-48927 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in Ma…
Medium KEV CVSS: 5.3

CVE-2025-48927

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.
Vendor
Smarsh
Product
Telemessage
CWE
CWE-1188
Yayın Tarihi
2025-05-28 17:15:24
Güncelleme
2025-11-05 19:26:13
Source Identifier
cve@mitre.org
KEV Date Added
2025-07-01

Kategoriler

CWE-1188 Telemessage MEDIUM Smarsh 2025

Referanslar

https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48927