cbcvebase.

Spring By Vmware Spring Cloud Netflix vulnerabilities

1 known vulnerability affecting spring_by_vmware/spring_cloud_netflix.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2020-5412P2MEDIUMCVSS 6.5ExploitedPoC≥ 2.2, < 2.2.4≥ 2.1, < 2.1.62020-08-07
CVE-2020-5412 [MEDIUM] CWE-441 CVE-2020-5412: Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupp Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. A malicious user, or attacker, can send a request to other servers that should not be expo
nvd
Spring By Vmware Spring Cloud Netflix vulnerabilities | cvebase