Vulnerabilities > Vmware > Spring Cloud Config > High

DATE CVE VULNERABILITY TITLE RISK
2020-06-02 CVE-2020-5410 Path Traversal vulnerability in VMWare Spring Cloud Config
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module.
network
low complexity
vmware CWE-22
7.5