CVE-2020-19704: Spring-Boot-Admin Project Spring-Boot-Admin

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A stored cross-site scripting (XSS) vulnerability via ResourceController.java in spring-boot-admin as of 20190710 allows attackers to execute arbitrary web scripts or HTML.

Affected products

• Spring-Boot-Admin Project Spring-Boot-Admin: version 20190710 only

Published 2021-08-26. Last modified 2026-06-17.