CVE-2026-47837 - Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2.8, and through 3.1.14. - 漏洞详情

漏洞编号：CVE-2026-47837

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-47837

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-306

发布/更新时间：2026-08-26 / 2026-08-28

漏洞描述

Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated.

This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2.8, and through 3.1.14.

漏洞描述

相关链接

相关漏洞