Skip to content
OpenAdvisories

Product · Spring

Spring Cloud

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-22739

    Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks

    Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories…

    Spring Spring Cloud org.springframework.cloud:spring-cloud-config-server Maven