← Back

CVE-2026-22739

nvd nistnuclei
Published: Mar 24, 2026Modified: Sep 4, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Exploitability: 3.9 / Impact: 4.7
Source: security@vmware.com (Secondary)

Description

Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible to access files outside of the configured search directories.This issue affects Spring Cloud: from 3.1.X before 3.1.13, from 4.1.X before 4.1.9, from 4.2.X before 4.2.3, from 4.3.X before 4.3.2, from 5.0.X before 5.0.2.

Affected (5)

Vmware
1 product
Spring Cloud Config
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Spring Cloud Config
version < 3.1.13
Spring Cloud Config
4.1.0 ≤ version < 4.1.9
Spring Cloud Config
4.2.0 ≤ version < 4.2.6
Spring Cloud Config
4.3.0 ≤ version < 4.3.2
Spring Cloud Config
5.0.0 ≤ version < 5.0.2

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

Source: security@vmware.com
Vendor Advisory

Timeline

No history available yet.