ZeroDay Findings
Sign inSign up

Findings

CVE-2020-5410

VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability

Published Jun 2, 2020 · updated Jun 16, 2026 · vmware spring cloud config

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 2, 2020 · Catalog

    Detected

    Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack.

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe vmware/spring cloud configversion unspecified
  • vendor VMware Tanzu Spring Cloud Configuration (Config) Serverversion unspecified

Sources

  • CISA KEVCVE-2020-5410

    Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.

    cisa.gov
  • CVE.orgCVE-2020-5410

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-5410

    30-day exploitation probability 95.6%

    first.org
  • Metasploit Modulesauxiliary_scanner/http/springcloud_directory_traversal

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2020-5410

    Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a spe

    nvd.nist.gov

References