CVE-2020-5428

2021-01-2718:15:13

Google

osv.dev

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.7%

JSON

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

CPENameOperatorVersion
spring-cloud-taskeq2.1.0.RELEASE
spring-cloud-taskeq1.0.1.RELEASE
spring-cloud-taskeq2.2.3.RELEASE
spring-cloud-taskeq2.2.0.M2
spring-cloud-taskeq2.2.0.M1
spring-cloud-taskeq2.1.0.RC1
spring-cloud-taskeq2.2.2.RELEASE
spring-cloud-taskeq2.2.4.RELEASE
spring-cloud-taskeq2.1.0.M2
spring-cloud-taskeq2.2.0.M3

Name	Operator	Version
spring-cloud-task	eq	2.1.0.RELEASE
spring-cloud-task	eq	1.0.1.RELEASE
spring-cloud-task	eq	2.2.3.RELEASE
spring-cloud-task	eq	2.2.0.M2
spring-cloud-task	eq	2.2.0.M1
spring-cloud-task	eq	2.1.0.RC1
spring-cloud-task	eq	2.2.2.RELEASE
spring-cloud-task	eq	2.2.4.RELEASE
spring-cloud-task	eq	2.1.0.M2
spring-cloud-task	eq	2.2.0.M3