Spring ApplicationContext Hierarchy and a High CVE in Axelix

Author: Mikhail Polivakha

Original post on Foojay: Read More

How Spring’s ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.