Lucene search
GoogleOSV:CVE-2020-5410HistoryJun 02, 2020 - 5:15 p.m.
CVE-2020-5410
2020-06-0217:15:11
Google
osv.dev
12
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.
References
Related
githubexploit
githubexploit
Exploit for Path Traversal in Vmware Spring Cloud Config
2021-02-20 08:05:51
Exploit for Path Traversal in Vmware Spring Cloud Config
2020-06-16 20:15:58
Exploit for Path Traversal in Vmware Spring Cloud Config
2020-09-20 19:13:17
prion
prion
Directory traversal
2020-06-02 17:15:00
veracode
veracode
Directory Traversal
2020-06-03 03:57:57
cvelist
cvelist
CVE-2020-5410 Directory Traversal with spring-cloud-config-server
2020-06-02 16:50:12
nvd
nvd
CVE-2020-5410
2020-06-02 17:15:11
metasploit
metasploit
Directory Traversal in Spring Cloud Config Server
2020-07-01 11:15:32
attackerkb
attackerkb
CVE-2020-5410
2020-06-01 00:00:00
cisa_kev
cisa_kev
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
2022-03-25 00:00:00
packetstorm
packetstorm
Spring Cloud Config Server Directory Traversal
2024-09-01 00:00:00
nessus
nessus
VMware Spring Cloud Config 2.1 < 2.1.9 / 2.2 < 2.2.3 Directory Traversal
2022-07-29 00:00:00
nuclei
nuclei
Spring Cloud Config Server - Local File Inclusion
2020-06-18 10:16:29
redhatcve
redhatcve
CVE-2020-5410
2020-06-09 16:55:09
cve
cve
CVE-2020-5410
2020-06-02 17:15:11
github
github
Directory traversal attack in Spring Cloud Config
2020-06-05 16:13:20
osv
osv
Directory traversal attack in Spring Cloud Config
2020-06-05 16:13:20
openvas
openvas
Generic HTTP Directory Traversal (Web Root) - Active Check
2017-04-18 00:00:00
Generic HTTP Directory Traversal (Web Dirs) - Active Check
2021-07-22 00:00:00
redhat
redhat
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
(RHSA-2021:3140) Moderate: Red Hat Fuse 7.9.0 release and security update
2021-08-11 18:18:10
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00