环境：
https://github.com/shadowsock5/spring-cloud-config-starter
启动完成：
curl -u root:root http://192.168.170.139:8888/cqq-config/test
修复的commit是这个：
https://github.com/spring-cloud/spring-cloud-config/commit/651f458919c40ef9a5e93e7d76bf98575910fad0
参考：
- CVE-2020-5405: Directory Traversal with spring-cloud-config-server
- 【漏洞通告】Spring-cloud-config-server路径遍历漏洞（CVE-2020-5405)通告
- https://www.baeldung.com/spring-cloud-configuration
- https://howtodoinjava.com/spring-cloud/spring-cloud-config-server-git/
- http://www.ityouknow.com/springcloud/2017/05/22/springcloud-config-git.html
- https://github.com/ityouknow/spring-cloud-examples/blob/master/spring-cloud-config-git/spring-cloud-config-server
- https://howtodoinjava.com/spring-cloud/spring-cloud-config-server-git/
- 通用的 HTTP 认证框架
- https://github.com/shadowsock5/spring-cloud-config-starter
来源：CSDN
作者：caiqiiqi
链接：https://blog.csdn.net/caiqiiqi/article/details/104729207