← Database

CVE-2026-47894

MEDIUM CVSS: 4.9 Published: 2026-08-27 Modified: 2026-09-01

Description

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

Affected Platforms

Vmware Spring Cloud Config

Weakness Type

NVD-CWE-noinfo

References