Spring Cloud Config vulnerabilities
1 known vulnerability in Spring Cloud Config from Spring by VMware. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
1exploited
7.5average CVSS score
Latest first
- 7.5 High severity
VMware Tanzu Spring Cloud Config Directory Traversal Exploited
Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a