Vulnerability

CVE-2020-5421: Spring Framework Reflective File Download Vulnerability Alerts

Recently, VMware Tanzu issued a security bulletin, announcing a Reflected File Download (RFD) vulnerability, CVE-2020-5421 that exists in the Spring Framework. CVE-2020-5421 can bypass the protection against RFD attacks through the jsessionid path parameter....