{"uuid": "b722a90f-38fe-4320-8abb-5c285dd4a1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-5410", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springcloud_directory_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Fei Lu\", \"bfpiaoran \", \"Dhiraj Mishra\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated directory traversal vulnerability\\n          which exists in Spring Cloud Config versions 2.2.x prior to 2.2.3 and\\n          2.1.x prior to 2.1.9, and older unsupported versions. Spring\\n          Cloud Config listens by default on port 8888.\", \"disclosure_date\": \"2020-06-01\", \"fullname\": \"auxiliary/scanner/http/springcloud_directory_traversal\", \"is_install_path\": true, \"mod_time\": \"2023-02-03 18:12:53 +0000\", \"name\": \"Directory Traversal in Spring Cloud Config Server\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/springcloud_directory_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/springcloud_directory_traversal\", \"references\": [\"CVE-2020-5410\", \"URL-https://tanzu.vmware.com/security/cve-2020-5410\", \"URL-https://xz.aliyun.com/t/7877\"], \"rport\": 8888, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:52.060114Z"}