CVE-2026-59284 - There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier - 漏洞详情

漏洞编号：CVE-2026-59284

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-59284

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：-

发布/更新时间：2026-08-27 / 2026-08-28

漏洞描述

There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled.
Spring Cloud Commons 5.0.0 - 5.0.2
Spring Cloud Commons 4.3.0 - 4.3.3
Spring Cloud Commons 4.0.0 - 4.2.6
Spring Cloud Commons 3.1.10 and earlier

CVE-2026-59284 - There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier - 漏洞详情

漏洞描述

相关链接