The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to loopback. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://spring.io/security/cve-2026-47873 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.0 · broadcomNVD modified 2026-10-23 22:10
Affected (CPE criteria) 1
cpe:2.3:a:broadcom:spring_tools:*:*:*:*:*:eclipse:*:*
References 1
- https://spring.io/security/cve-2026-47873 Vendor Advisory