GitHub Advisoryadvisory · Maven

GHSA-4x49-w62v-76q7 Path Traversal in Spring Cloud Config

MEDIUM Published 2019-05-23 Modified 2021-08-03 Official page ↗
Aliases
CVE-2019-3799
Ecosystem
Maven
Packages
org.springframework.cloud:spring-cloud-config-server
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2019-05-10

Affected packages

• Maven org.springframework.cloud:spring-cloud-config-server: < 1.4.6 → fixed in 1.4.6 • Maven org.springframework.cloud:spring-cloud-config-server: >= 2.0.0, < 2.0.4 → fixed in 2.0.4 • Maven org.springframework.cloud:spring-cloud-config-server: >= 2.1.0, < 2.1.2 → fixed in 2.1.2

Description

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

Related

Alias · CVE (1)

  • CVE-2019-3799 Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References