High severity · published Jun 2, 2020
CVE-2020-5410
Directory Traversal with spring-cloud-config-server
In wildKEV
7.5
CVSS
95.6%
EPSS
Yes
On KEV
Description
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)95.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
SC
Spring Cloud Config · Spring by VMware
2.1 before 2.1.9; 2.2 before 2.2.3 · source: vendor, NVD
SC
Spring Cloud Configuration (Config) Server · VMware Tanzu
All versions, or not specified · source: KEV