Description
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Spring Cloud Config | Spring by VMware / Spring Cloud Config | >= 2.1, < 2.1.9 | affected |
| Spring Cloud Config | Spring by VMware / Spring Cloud Config | >= 2.2, < 2.2.3 | affected |