Spring Tools For Vscode / Cursor / Theia
Approved changes feed: RSS · Atom
cpe:2.3:a:spring:spring_tools_for_vscode_/_cursor_/_theia:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Spring (4c7a31af-cbd7-516f-b1ce-2d5f574797bc) |
|---|---|
| Product | Spring Tools For Vscode / Cursor / Theia (70524f01-3be4-5f40-b745-2bf82a644535) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47858 |
vulnerable | 2026-09-16 04:34:01.469686 |
live information startup mode is vulnerable for remote code execution
HIGH (8)
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution.
Affected Spring Products and Versions:
Spring Tools for Eclipse: 5.2.0 and earlier
Spring Tools for VSCode / Cursor / Theia: 2.2.0 and earlier
Published: 2026-07-30T05:15:31.292Z
Updated: 2026-08-01T03:56:10.532Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.