thymeleaf Spring Boot Admin Vulnerabilities