daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2020/CVE-2020-5410.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-28 15:13:15 -04:00
parent 600f1e5d2f
commit a5af80c182
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cves/2020/CVE-2020-5410.yaml
View File

@ -4,7 +4,7 @@ info:
name: Spring Cloud Config Server - Local File Inclusion
author: mavericknerd
severity: high
description: Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user, or attacker can send a request using a specially crafted URL that can lead to a local file inclusion attack.
description: Spring Cloud Config Server versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-config-server module. A malicious user or attacker can send a request using a specially crafted URL that can lead to a local file inclusion attack.
reference:
- https://tanzu.vmware.com/security/cve-2020-5410
- https://nvd.nist.gov/vuln/detail/CVE-2020-5410