CVE-2026-47873

Published: Jul 30, 2026Modified: Aug 1, 2026

8.0

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: security@vmware.com (Secondary)

Description

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

Related CWEs

CWE-1327

Binding to an Unrestricted IP Address

The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

References (1)

https://spring.io/security/cve-2026-47873

Source: security@vmware.com

Timeline

No history available yet.