CVE-2026-47873highCWE-1327

Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8

probabilidade de exploração

—

exploração observada

nãonenhuma fonte reporta

The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Spring · Spring Tools for Eclipse

Referências

https://spring.io/security/cve-2026-47873