org.springframework.cloud:spring-cloud-config-server

4 results · Clear filters · Feed

• High 7.5
  CVE-2026-40981

  Spring Cloud Config has an Authorization Bypass Through User-Controlled Key

  When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclu…

  Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  May 7, 2026
• High 7.4
  CVE-2026-41002

  Spring Cloud Config Server Susceptible To TOCTOU Attack

  The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (incl…

  Spring Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  May 7, 2026
• High 8.6
  CVE-2026-22739

  Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks

  Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories…

  Spring Spring Cloud org.springframework.cloud:spring-cloud-config-server Maven
  Mar 24, 2026
• High 7.5
  CVE-2020-5410 Exploited Public exploit EPSS 96%

  Directory Traversal with spring-cloud-config-server

  Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send …

  Spring by VMware Spring Cloud Config org.springframework.cloud:spring-cloud-config-server Maven
  Jun 2, 2020

  KEV Mar 25, 2022