Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: VMware Component: Spring Cloud Config Clear all filters
TI-2026-42446 CVE-2026-59315 · GHSA-m8cp-w83w-vr3r

Spring Cloud Config Monitor Denial of Service

Priority LOW 30

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00402 Published 2026-08-27 No fix listed CWE-400
TI-2026-35288 CVE-2026-47836 · GHSA-w2ff-ccff-p3cx

Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN

Priority LOW 37

The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00216 Published 2026-08-26 No fix listed CWE-367
TI-2026-29632 CVE-2026-40981 · GHSA-2mh5-3cw6-hrrq

Authorization bypass in VMware Spring Cloud Config

Priority LOW 39

When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00435 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-639
TI-2026-29653 CVE-2026-41002 · GHSA-86wq-234q-r6wg

Time-of-check time-of-use race condition in VMware Spring Cloud Config

Priority LOW 37

The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0022 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-367
TI-2026-29655 CVE-2026-41004 · GHSA-j6hh-h3cf-c2hf

Sensitive information in log files in VMware Spring Cloud Config

Priority LOW 20

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00168 Published 2026-05-07 Partial fix · 3.1.14, 4.1.10 +3 CWE-532
TI-2026-29633 CVE-2026-40982 · GHSA-6g23-24mc-hx6x

Path traversal in VMware Spring Cloud Config

Priority MEDIUM 48

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00727 Published 2026-05-07 Fixed in 3.1.14, 4.1.10 +3 CWE-22
TI-2026-18263 CVE-2026-22739 · GHSA-3qwq-q9vm-5j42

Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks

Priority MEDIUM 46

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outsi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0122 Published 2026-03-24 Fixed in 3.1.13, 4.1.9 +3 CWE-22
TI-2023-07278 CVE-2023-20859 · GHSA-r47r-87p9-8jh3

Sensitive information in log files in Spring Vault, Spring Cloud Vault, Spring Cloud…

Priority LOW 24

In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault b…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2023-03-23 Fixed in 3.0.2, 2.3.3 CWE-532
TI-2020-04456 CVE-2020-5410 · GHSA-32xf-jwmv-9hf3

Directory Traversal with spring-cloud-config-server

Priority CRITICAL 90KEV

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.95586 Published 2020-06-02 Fixed in 2.1.9, 2.2.3 CWE-23
TI-2020-04451 CVE-2020-5405 · GHSA-g86w-v5vg-9gxf

Directory Traversal with spring-cloud-config-server

Priority HIGH 66

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.68542 Published 2020-03-05 Fixed in 2.2.2, 2.1.7 CWE-23
TI-2019-02811 CVE-2019-3799 · GHSA-4x49-w62v-76q7

Directory Traversal with spring-cloud-config-server

Priority HIGH 70

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the s…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.85295 Published 2019-05-06 Partial fix · v2.0.4.RELEASE, v1.4.6.RELEASE +4 CWE-22