CVE-2026-47894

Updated on 27 Aug 2026

Severity

4.0 Medium severity

Details

CVSS score
4.0
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Overview

About vulnerability

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.

Details

Affected product:
Apache Log4j , Spring
Affected packages:
log4j-bom @ 2.17.2 (+268 more)