CVE Intelligence

Vulnerabilidades do Spring by VMware Spring Cloud Config

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Spring by VMware Spring Cloud Config: 1 registro(s), com versões afetadas e correções.

CVE-2020-5410 Alta · 7.5 KEV Urgente · 79 Exploit público CWE-22 02/06/2020
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.