Config files : DevTools enabled

The Spring Boot application is configured in developer mode.

The application uses a DevTools instruments that can make the development proccess more comfortable. An attacker can exploit this functionality if DevTools explicity used in a production environment.

In the official Spring Boot documentation stated: “Enabling spring-boot-devtools on a remote application is a security risk. You should never enable support on a production deployment.”