medium4.9
CVE-2026-47894
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.
Impact
Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Cloud Config | before 3.1.15 from 4.0.0 before 4.2.9 from 4.3.0 before 4.3.5 from 5.0.0 before 5.0.5 |