Description
Spring Cloud Config存在目录遍历漏洞，此漏洞是由于应用程序对请求路径没有进行充分校验导致的。
Spring Cloud Config CVE-2020-5410 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sentinelone.com/vulnerability-database/cve-2020-5410/
https://github.com/advisories/GHSA-32xf-jwmv-9hf3
https://avd.aquasec.com/nvd/2020/cve-2020-5410/
https://spring.io/security/cve-2020-5410
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/springcloud_directory_traversal.rb
https://www.cvedetails.com/cve/CVE-2020-5410/
https://cvepremium.circl.lu/vuln/ghsa-32xf-jwmv-9hf3
https://advisories.gitlab.com/pkg/maven/org.springframework.cloud/spring-cloud-config-server/CVE-2020-5410/
https://cve.circl.lu/vuln/cve-2020-5410
https://tanzu.vmware.com/security/cve-2020-5410