VMware Tanzu · Spring Cloud Configuration (Config) Server
CVE-2020-5410
Directory Traversal with spring-cloud-config-server
What it is
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.
CISA: Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 15, 2022
- Added to the CISA list
- March 25, 2022
- Published
- June 2, 2020
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 96% in the top 0.1% of all known vulnerabilities
- Weakness
- CWE-23
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from VMware Tanzu
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 25, 2022 | Function Remote Code Execution | Spring Cloud | Critical 9.8 | 99.9% |
| Mar 25, 2022 | Property Binder | Spring Data Commons | Critical 9.8 | 97% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.