Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Spring Cloud Config Server may expose arbitrary files

CVE-2020-5410 · published 6 years ago · actively exploited
Summary

The Spring Cloud Config Server component from VMware Tanzu can be tricked into returning files from anywhere on the system, not just the intended configuration directory. This could let an attacker read sensitive settings, passwords, or other private data. Apply the vendor's security update or patch as soon as possible and verify that only trusted users can access the server.

What to do
  • Update springframework org.springframework.cloud:spring-cloud-config-server to version 2.1.9.
  • Update springframework org.springframework.cloud:spring-cloud-config-server to version 2.2.3.
Affected software
Ecosystem VendorProductAffected versions
– vmware tanzu spring cloud configuration (config) server All versions
maven springframework org.springframework.cloud:spring-cloud-config-server >= 2.1.0, < 2.1.9
>= 2.2.0, < 2.2.3
Fix: upgrade to 2.1.9
– vmware spring_cloud_config >= 2.1.0, < 2.1.9
>= 2.2.0, < 2.2.3
cpe:2.3:a:vmware:spring_cloud_config:*:*:*:*:*:*:*:*
Original advisory text
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
References
Fix within
Internet-facing 3 days
Internal 14 days
  • Known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
96% chance of attack within 30 days
Type
CWE-22Path Traversal
CWE-23Relative Path Traversal
Timeline
Published2 Jun 2020
Updated20 Oct 2026
First seen6 Mar 2026
Sources
CVE-2020-5410 · CISA KEV
CVE-2020-5410 · NVD
GHSA-32xf-jwmv-9hf3 · GHSA
CVE-2020-5410 · OSV
Track software like this
Free during beta