Skip to content
OpenAdvisories

Product · Spring

Spring Tools for Eclipse

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-59327

    Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations

    Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the "Spring Boot DevTools Client" launch configuration. Eclipse persists launch configuration attributes as cleartext XML, ei…

    Spring Spring Tools for Eclipse
  • Medium 4.2
    CVE-2026-59328

    Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips

    Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browser) with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary…

    Spring Spring Tools for Eclipse