SC
Product
Spring Cloud Config
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 5Low 0
Watch
Add Spring Cloud Config to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5410 In wildKEV | 7.5 | Jun 2 | Directory Traversal with spring-cloud-config-server Affected: 2.1.0 before 2.1.9; 2.2.0 before 2.2.3 |
| CVE-2026-22739 | 8.6 | Mar 24 | Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks Affected: before 3.1.13; 4.1.0 before 4.1.9; 4.2.0 before 4.2.6; 4.3.0 before 4.3.2; 5.0.0 before 5.0.2 |
| CVE-2026-47836 | 8.1 | Aug 26 | Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-41002 | 8.1 | May 7 | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use… Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
| CVE-2026-47894 | 7.5 | Aug 27 | Spring Cloud Config Server Native Environment Repository Exposure Affected: before 3.1.15; 4.0.0 before 4.2.9; 4.3.0 before 4.3.5; 5.0.0 before 5.0.5 |
| CVE-2026-40981 | 7.5 | May 7 | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended… Affected: 3.1.0 before 3.1.14; 4.1.0 before 4.1.10; 4.2.0 before 4.2.7; 4.3.0 before 4.3.3; 5.0.0 before 5.0.3 |
Showing 6