CVE-2020-5410
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
Spring, by VMware Tanzu, Cloud Config contains a path traversal vulnerability that allows applications to serve arbitrary configuration files. Vendor/Product: VMware Tanzu Spring Cloud Configuration (Config) Server. Added to CISA KEV 2022-03-25; required action: Apply updates per vendor instructions.