CVE-2020-5410: Directory Traversal Attack in Spring Cloud Config
Summary
CVE-2020-5410: Directory traversal attack in Spring Cloud Config. Affects org.springframework.cloud:spring-cloud-config-server across 2 version ranges.
>= 2.1.0, < 2.1.9
>= 2.2.0, < 2.2.3
Fixed in 2.1.9 or 2.2.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Spring Cloud Config is a module in the Spring Cloud framework that provides server and client-side support for externalized configuration in a distributed system. It allows applications to retrieve their configuration from a centralized server. The Spring Cloud Config Server module is responsible for serving the configuration files to the client applications. This vulnerability affects versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions of Spring Cloud Config.
Vulnerability Detail
The vulnerability in Spring Cloud Config allows an attacker to perform a directory traversal attack. By sending a specially crafted URL, the attacker can access arbitrary configuration files served by the spring-cloud-config-server module. This can lead to unauthorized access to sensitive information or the execution of arbitrary code on the server. The vulnerability has a CVSS score of 7.5, indicating a high severity.
How To Fix
Latest published version: 5.1.0-RC1 as of 23 Oct 2026
Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
>= 2.1.0, < 2.1.92.1.9 -
>= 2.2.0, < 2.2.32.2.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by upgrading to the latest version of Spring Cloud Config.
Conclusion
The directory traversal vulnerability in Spring Cloud Config can allow an attacker to access arbitrary configuration files and potentially compromise the server. It is crucial to upgrade to the latest version of Spring Cloud Config and ensure proper server configuration to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.springframework.cloud:spring-cloud-config-server →
FAQ
Spring Cloud Config is a module in the Spring Cloud framework that provides server and client-side support for externalized configuration in a distributed system.
Versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions of Spring Cloud Config are affected.
A directory traversal attack is a type of security vulnerability where an attacker can access files or directories outside of the intended scope.
This vulnerability can lead to unauthorized access to sensitive configuration files or the execution of arbitrary code on the server.
The CVSS score of this vulnerability is 7.5, indicating a high severity.
Related vulnerabilities
Recent vulnerabilities recorded for org.springframework.cloud:spring-cloud-config-server.
