< Back

CVE-2026-47894

Updated on 27 Aug 2026

Severity

4.0 Medium severity

Details

CVSS score
4.0
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path.

Details

Affected product:
Apache Log4j , Spring
Affected packages:
Spring Cloud @ 3.1.6 (+366 more)