Threats Tagged 'ghsa-xv2j-23v2-w2r5'

CVE-2026-47894 is a path traversal vulnerability in Spring Cloud Config Server's native environment repository that allows exposure of configuration files outside the intended repository path. It affects multiple versions of Spring Cloud Config, including 3.1.14 and earlier, 4.0.0 through 4.2.8, 4.3.0 through 4.3.4, and 5.0.0 through 5.0.4. The vulnerability has a medium severity with a CVSS score of 4.9 and does not have an official patch or remediation guidance published yet.