{"uuid": "72549108-ea42-4940-bdb6-50a7b3e90fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-3799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springcloud_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Vern\", \"Dhiraj Mishra\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated directory traversal vulnerability\\n          which exists in Spring Cloud Config versions 2.1.x prior to 2.1.2,\\n          versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6. Spring\\n          Cloud Config listens by default on port 8888.\", \"disclosure_date\": \"2019-04-17\", \"fullname\": \"auxiliary/scanner/http/springcloud_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Spring Cloud Config Server Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/springcloud_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/springcloud_traversal\", \"references\": [\"CVE-2019-3799\", \"URL-https://pivotal.io/security/cve-2019-3799\"], \"rport\": 8888, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.145957Z"}