CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability. Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files.
- CISA KEV-listed (remediation due 2022-04-15)
- EPSS 94.3% (100.0% percentile)