GitHub Advisoryadvisory · Maven

GHSA-32xf-jwmv-9hf3 Directory traversal attack in Spring Cloud Config

HIGH Published 2020-06-05 Modified 2025-10-22 Official page ↗
Aliases
CVE-2020-5410
Ecosystem
Maven
Packages
org.springframework.cloud:spring-cloud-config-server
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H
Weaknesses
CWE-22, CWE-23
Reviewed
2020-06-04

Affected packages

• Maven org.springframework.cloud:spring-cloud-config-server: >= 2.1.0, < 2.1.9 → fixed in 2.1.9 • Maven org.springframework.cloud:spring-cloud-config-server: >= 2.2.0, < 2.2.3 → fixed in 2.2.3

Description

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.

Related

Alias · CVE (1)

  • CVE-2020-5410 Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to… vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-23 Relative Path Traversal weakness

References