Advisories · Technology
Spring Cloud Config.
Every CVE that names Spring Cloud Config among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Spring Cloud Config Monitor Denial of Service
- Spring Cloud Config
- Denial of service
- CVSS 4.9 Medium
Spring Cloud Config Server Native Environment Repository Exposure
- Spring Cloud Config
- CVSS 6.8 Medium
Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
- Spring Cloud Config
- Authentication bypass
- CVSS 7.2 High
Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN
- Spring Cloud Config
- CVSS 5.3 Medium
Spring Cloud Config Server May Not Use Vault Token Sent By Clients
- Spring Cloud Config
- Authentication bypass