Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a backend, because it was possible t

Updated affected versions and added new CWE and CVE information.

Updated affected versions, added new CWE, and included new tags related to Spring Security Advisory.

Updated affected versions to include 3.1.13, 4.1.9, and confirmed patch available is 5.0.2.

Updated description with new technical details and added affected version 4.2.6.

Updated affected versions to include 4.3.2 and marked exploit availability and active exploitation as true.

Updated vendor to Spring, product to Spring Cloud Config, added affected versions 3.1.3 and 4.2.6, and marked exploit availability and active exploitation as true.

Initial creation