{"id":"CVE-2025-53602","published":"2025-07-04T00:00:00Z","modified":"2025-07-08T14:36:13Z","title":"Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to…","vendor":"Open Zipkin","product":"Zipkin","tier":"tail","description":{"text":"Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.","provenance":"source","from":"CVE.org"},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00336,"percentile":0.26958,"provenance":"source"},"cwes":[{"id":"CWE-1188","name":"Initialization of a Resource with an Insecure Default"}],"references":[{"url":"https://zipkin.io/","tags":[]},{"url":"https://github.com/openzipkin/zipkin/commit/3c7605dfdfab2dd341cf0ea121a56cefcd580d9e","tags":[]},{"url":"https://github.com/openzipkin/zipkin/pull/3804","tags":[]}],"priority":{"score":9.1,"factors":[{"name":"EPSS percentile","points":5.39},{"name":"CVSS severity","points":3.71}]},"vendorSlug":"open-zipkin","affectedVersions":[{"vendor":"Open Zipkin","product":"Zipkin","versions":["<= 3.5.1"]}],"affected":[{"ecosystem":"Maven","package":"io.zipkin:zipkin-server","vulnerableRanges":["<=3.5.1"],"patched":[],"from":["GHSA-794x-8x6x-qpfc"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-20090","exploited":false,"provenance":"source"},"lineage":{"parents":[{"from":"CVE-2025-48927","to":"CVE-2025-53602","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-2025-48927.","from":"CVE.org","in":"CVE-2025-53602"}]}]}}