Known vulnerabilities in Spring Cloud Config 2.1.8

Vendor: Broadcom
Version: 2.1.8
Software CPE: cpe:2.3:a:broadcom:spring_cloud_config:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring Cloud Config version 2.1.8 Spring Cloud Config 2.1.8 is affected by 1 vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28498 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5410
CWE-22 Medium
Public exploit available
Exploited
2.1.9, 2.2.3 02.06.2020 SB2020060202
SB20240117118