CVE-2026-47873highCWE-1327

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

18Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8

probabilidad de explotación

—

explotación observada

noninguna fuente lo reporta

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Spring · Spring Tools for Eclipse

Referencias

https://spring.io/security/cve-2026-47873