CVE-2020-5398

HIGH

Vmware Spring Framework < 5.0.16 - XSS

Title source: rule

Description

In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.

Exploits (1)

nomisec WORKING POC 87 stars
by motikan2010 · poc
https://github.com/motikan2010/CVE-2020-5398

References (44)

... and 24 more

Scores

CVSS v3 7.5
EPSS 0.9018
EPSS Percentile 99.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-494 CWE-79
Status published
Products (50)
netapp/data_availability_services
netapp/snapcenter
oracle/application_testing_suite 13.3.0.1
oracle/communications_billing_and_revenue_management_elastic_charging_engine 11.3
oracle/communications_billing_and_revenue_management_elastic_charging_engine 12.0
oracle/communications_cloud_native_core_policy 1.5.0
oracle/communications_diameter_signaling_router 8.0.0 - 8.2.2
oracle/communications_element_manager 8.1.1
oracle/communications_element_manager 8.2.0
oracle/communications_element_manager 8.2.1
... and 40 more
Published Jan 17, 2020
Tracked Since Feb 18, 2026