spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

CVE-2020-5405

creationtimestamp| type| source ---|---|--- 2025-08-22 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4vc3rw2w...

ai.hyacinth.framework:core-service-config-server (0.5.24), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +12 more potentially affected by CVE-2020-5405 via org.springframework.cloud:spring-cloud-config-server (>=2.2.0.release, <=2.2.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version =2.2.0.release, =6.2.0-rc1, =6.2.0-rc1, =2.2.0.release, =2.2.0.release, =2.2.1.release Source cves: CVE-2020-5405 Source advisory: GHSA-G86W-V5VG-9GXFhttps://vu...

ai.hyacinth.framework:core-service-config-server (>=0.5.0, <=0.5.21), com.alibaba.cloud:spring-cloud-alibaba-nacos-config-server (>=2.1.0.release, <=2.1.1.release) +17 more potentially affected by CVE-2020-5405 via org.springframework.cloud:spring-cloud-config-server (>=2.1.0.release, <=2.1.6.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version =2.1.0.release, =0.5.0, =2.1.0.release, =1.2.0, =1.0.0, =6.0.1, =6.0.1, =6.0.1, =2.1.0.release, =2.1.0.release, =2.1.0.release, =2.1.0.release, =2.1.0.release, =2.1.4.release - org.springframework.cloud.stream.app:spring-cl...

ai.hyacinth.framework:core-service-config-server (0.5.24), cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release) +12 more potentially affected by CVE-2020-5405 via org.springframework.cloud:spring-cloud-config-server (>=2.2.0.release, <=2.2.1.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version =2.2.0.release, =6.2.0-rc1, =6.2.0-rc1, =2.2.0.release, =2.2.0.release, =2.2.1.release Source cves: CVE-2020-5405 Source advisory: OSV:GHSA-G86W-V5VG-9GXFhttps:...

CVE-2020-5405

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted UR...

CVE-2020-5405

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted UR...

CVE-2020-5405 Directory Traversal with spring-cloud-config-server

Spring Cloud Config, versions 2.2.x prior to 2.2.2, versions 2.1.x prior to 2.1.7, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted UR...

CVE-2020-5405

Spring Cloud Config - Local File Inclusion (CVE-2020-5405): Affects Spring Cloud Config Server in 2.2.x before 2.2.2 and 2.1.x before 2.1.7 (older/unsupported). Exploitable via a crafted URL to serve arbitrary configuration files, enabling potential data exposure. Remediation: upgrade to patched ...