Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Spring Cloud Config — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Spring Cloud Config, with AI-generated Chinese analysis, references, and POCs.

Vendor: Spring

CVE ID Title CVSS Severity Published
CVE-2026-59315 Spring Cloud Config Monitor Denial of Service 5.3 Medium 2026-08-27
CVE-2026-47894 Spring Cloud Config Server Native Environment Repository Exposure 4.9 Medium 2026-08-27
CVE-2026-47837 Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests CWE-306 6.8 Medium 2026-08-26
CVE-2026-47836 Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN 7.2 High 2026-08-26
CVE-2026-40981 VMware Spring Cloud Config 安全漏洞 CWE-639 7.5 High 2026-05-07
CVE-2026-41002 VMware Spring Cloud Config 安全漏洞 CWE-367 7.4 High 2026-05-07
CVE-2026-41004 VMware Spring Cloud Config 日志信息泄露漏洞 CWE-532 4.4 Medium 2026-05-07
CVE-2026-40982 VMware Spring Cloud Config 路径遍历漏洞 CWE-22 9.1 Critical 2026-05-07
CVE-2025-22232 Spring Cloud Config Server May Not Use Vault Token Sent By Clients CWE-287 5.3 Medium 2025-04-10
CVE-2020-5410 Directory Traversal with spring-cloud-config-server CWE-23 6.5 - 2020-06-02
CVE-2020-5405 Directory Traversal with spring-cloud-config-server CWE-23 6.5 - 2020-03-05
CVE-2019-3799 Directory Traversal with spring-cloud-config-server CWE-22 6.5 - 2019-05-06

All 12 known CVE vulnerabilities affecting Spring Cloud Config with full Chinese analysis, references, and POCs where available.