← Back to CVE search

CVE-2026-47894

Spring Cloud Config

Description

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

CVSS 4.9EPSS 0.316%Risk 0.5
View source
Published
2026-08-27 06:17:20
Affected versions
>=5.0.0,<=5.0.4,>=4.3.0,<=4.3.4,>=4.0.0,<=4.2.8,<=3.1.14
Type
Library
Last modified
2026-08-27 17:18:40
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N