SC
Product
Spring Cloud Config
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 5Low 0
Watch
Add Spring Cloud Config to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5410 In wildKEV | 7.5 | Jun 2 | Directory Traversal with spring-cloud-config-server Affected: 2.1.0 before 2.1.9; 2.2.0 before 2.2.3 |
| CVE-2026-47837 | 9.8 | Aug 26 | Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-40982 | 9.1 | May 7 | Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
| CVE-2026-22739 | 8.6 | Mar 24 | Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend,… Affected: before 3.1.13; 4.1.0 before 4.1.9; 4.2.0 before 4.2.6; 4.3.0 before 4.3.2; 5.0.0 before 5.0.2 |
| CVE-2026-47836 | 8.1 | Aug 26 | Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-41002 | 8.1 | May 7 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use… Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
| CVE-2026-47894 | 7.5 | Aug 27 | Spring Cloud Config Server Native Environment Repository Exposure Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-40981 | 7.5 | May 7 | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended… Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
| CVE-2020-5405 | 6.5 | Mar 5 | Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through… Affected: 2.1.0 before 2.1.7; 2.2.0 before 2.2.2 |
| CVE-2019-3799 | 6.5 | May 6 | Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve… Affected: 1.4.0 before 1.4.6; 2.0.0 before 2.0.4; 2.1.0 before 2.1.2 |
| CVE-2023-20859 | 5.5 | Mar 23 | In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log… Affected: 3.1.0 through 3.1.6; 4.0.0 through 4.0.1 |
| CVE-2026-59315 | 5.3 | Aug 27 | Spring Cloud Config Monitor Denial of Service Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-41004 | 4.4 | May 7 | When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
Showing 13