SQL Injection in Spring Cloud Task

2022-02-0922:16:53

Google

osv.dev

0.001 Low

EPSS

Percentile

38.7%

JSON

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

CPENameOperatorVersion
org.springframework.cloud:spring-cloud-task-dependencieseq1.0.2.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq2.0.2.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.1.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.2.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq2.1.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.1.0.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq2.1.4.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.0.3.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.0.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencieseq1.2.2.RELEASE

Name	Operator	Version
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.0.2.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	2.0.2.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.1.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.2.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	2.1.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.1.0.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	2.1.4.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.0.3.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.0.1.RELEASE
org.springframework.cloud:spring-cloud-task-dependencies	eq	1.2.2.RELEASE