Vulnerability record: CVE-2020-5405 in spring-cloud/spring-cloud-config (version 2.1.6.RELEASE)
Weakness: CWE-022 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
GitHub Security Advisory: GHSA-g86w-v5vg-9gxf
Repository: https://github.com/spring-cloud/spring-cloud-config
Buggy commit: 24e7292e5930367396461354d3f9d8ba8b94771c
Fix commit(s): 651f458919c40ef9a5e93e7d76bf98575910fad0