{"id":10184,"date":"2020-03-31T01:59:16","date_gmt":"2020-03-31T01:59:16","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=10184"},"modified":"2026-04-17T18:07:49","modified_gmt":"2026-04-17T18:07:49","slug":"spring-cloud-config-server-path-traversal-cve-2020-5405-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/spring-cloud-config-server-path-traversal-cve-2020-5405-threat-alert\/","title":{"rendered":"Spring Cloud Config Server Path Traversal (CVE-2020-5405) Threat Alert"},"content":{"rendered":"


\n<\/p>\n

<\/a>Vulnerability Description<\/strong><\/h2>\n

Security researchers from NSFOCUS found a directory traversal vulnerability (CVE-2020-5405) in the Spring Cloud Config component. On February 26, Spring released a security bulletin to announce this vulnerability and also expressed appreciation to NSFOCUS.<\/p>\n

Attackers could exploit this vulnerability to read files in an unauthorized way through directory traversal. Affected users should upgrade the spring-cloud-config-server to a version that has this vulnerability fixed.<\/p>\n

The following is a screenshot of attack success<\/p>\n

\"Red<\/a><\/p>\n

For details of this vulnerability, visit the following link:<\/p>\n

https:\/\/pivotal.io\/security\/cve-2020-5405<\/p>\n

Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/strong><\/p>\n

Spring Cloud Config<\/p>\n