Lucene search
Redhat.comRH:CVE-2020-5398HistoryFeb 06, 2020 - 5:44 p.m.
CVE-2020-5398
2020-02-0617:44:24
redhat.com
access.redhat.com
18
0.625 Medium
EPSS
Percentile
97.9%
A flaw was found in springframework in versions prior to 5.0.16, 5.1.13, and 5.2.3. A reflected file download (RFD) attack is possible when a “Content-Disposition” header is set in response to where the filename attribute is derived from user supplied input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Related
nessus
nessus
MySQL Enterprise Monitor 4.0.x < 4.0.13.5350 / 8.0.x < 8.0.21.1243 (Jul 2020 CPU)
2020-07-17 00:00:00
Spring Framework 5.0.x < 5.0.16 / 5.1.x < 5.1.13 / 5.2.x < 5.2.3 Spring Framework Reflected File Download Vulnerability. (CVE-2020-5398)
2020-01-22 00:00:00
Oracle WebLogic Server Multiple Vulnerabilities (Jul 2020 CPU)
2020-07-17 00:00:00
veracode
veracode
Reflected File Download
2020-01-17 03:59:26
cve
cve
CVE-2020-5398
2020-01-17 00:15:12
cvelist
cvelist
nvd
nvd
CVE-2020-5398
2020-01-17 00:15:12
atlassian
atlassian
Spring Framework Vulnerability - CVE-2020-5398
2020-02-17 06:00:21
Update application links to 5.4.23 to fix CVE-2020-5398
2021-02-03 22:45:35
Spring Framework Vulnerability - CVE-2020-5398
2020-02-17 06:00:21
github
github
ubuntucve
ubuntucve
CVE-2020-5398
2020-01-17 00:00:00
osv
osv
CVE-2020-5398
2020-01-17 00:15:12
debiancve
debiancve
CVE-2020-5398
2020-01-17 00:15:12
checkpoint_advisories
checkpoint_advisories
Vmware Spring Framework Remote Code Execution (CVE-2020-5398)
2022-10-03 00:00:00
prion
prion
Input validation
2020-01-17 00:15:00
ibm
ibm
redhat
redhat
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00