GitHub Advisoryadvisory · Maven

GHSA-g86w-v5vg-9gxf Directory traversal attack in Spring Cloud Config

MEDIUM Published 2020-06-05 Modified 2021-08-25 Official page ↗
Aliases
CVE-2020-5405
Ecosystem
Maven
Packages
org.springframework.cloud:spring-cloud-config-server
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-22, CWE-23
Reviewed
2020-06-04

Affected packages

• Maven org.springframework.cloud:spring-cloud-config-server: >= 2.1.0, < 2.1.7 → fixed in 2.1.7 • Maven org.springframework.cloud:spring-cloud-config-server: >= 2.2.0, < 2.2.2 → fixed in 2.2.2

Description

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead a directory traversal attack.

Related

Alias · CVE (1)

  • CVE-2020-5405 Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to… vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-23 Relative Path Traversal weakness

References