Known vulnerabilities in Spring Cloud Config v2.1.1.

Vendor: Broadcom
Version: v2.1.1.
Software CPE: cpe:2.3:a:broadcom:spring_cloud_config:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Cloud Config version v2.1.1. Spring Cloud Config v2.1.1. is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28498 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5410
CWE-22 Medium
Public exploit available
Exploited
2.1.9, 2.2.3 02.06.2020 SB2020060202
SB20240117118
#VU18426 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3799
CWE-22 Medium
Public exploit available
No
2.1.2 10.05.2019 SB2019050619
SB2022042257