exploitDog

GHSA-xv2j-23v2-w2r5

Опубликовано: 27 авг. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 4.9

Описание

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

Ссылки

EPSS

Процентиль: 26%

0.00324

Низкий

4.9 Medium

CVSS3

CVE ID

Связанные уязвимости

CVE-2026-47894

CVSS3: 4.9

nvd

26 дней назад

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier

EPSS

Процентиль: 26%

0.00324

Низкий

4.9 Medium

CVSS3

CVE ID