CVE-2026-59315
MediumCVSS 5.3Summary
The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Affects Spring Cloud Config versions 5.0.0-5.0.4, 4.3.0-4.3.4, 4.0.0-4.2.8, and 3.1.14 and earlier.
Risk Assessment
An attacker can send malicious requests that overload the server, causing unavailability of configuration services. This may disrupt all applications relying on configuration.
Recommendation
It is recommended to upgrade Spring Cloud Config to the latest patched version. Also restrict access to the config monitor and implement overload protection mechanisms.
Original NVD description (English source)
The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier