Sql injection

2021-01-2718:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.2%

JSON

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

CPENameOperatorVersion
spring_cloud_data_flowge2.5.0
spring_cloud_data_flowlt2.5.4
spring_cloud_data_flowge2.6.0
spring_cloud_data_flowlt2.6.5

Name	Operator	Version
spring_cloud_data_flow	ge	2.5.0
spring_cloud_data_flow	lt	2.5.4
spring_cloud_data_flow	ge	2.6.0
spring_cloud_data_flow	lt	2.6.5

References

tanzu.vmware.com/security/cve-2020-5427