In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
{ "nvd_published_at": "2020-01-17T00:15:00Z", "cwe_ids": [ "CWE-494", "CWE-79" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-01-21T20:49:17Z" }