Lucene search
K

28 matches found

OSV
OSV
added 2022/02/09 10:16 p.m.31 views

GHSA-878W-7GXP-MC63 SQL Injection in Spring Cloud Task

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...

6CVSS6.3AI score0.00514EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/02/09 10:16 p.m.20 views

SQL Injection in Spring Cloud Task

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...

6.5CVSS6.8AI score0.00514EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2021/01/28 5:2 a.m.15 views

SQL Injection

spring-cloud-task-core is vulnerable to SQL injection. Lack of validation of the value that is passed via a PageRequest into the JdbcTaskExecutionDao potentially allows for execution of arbitrary SQL statements...

6CVSS5.5AI score0.00514EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/01/27 6:15 p.m.18 views

CVE-2020-5428

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...

6CVSS7.8AI score0.00514EPSS
Exploits0References1
Prion
Prion
added 2021/01/27 6:15 p.m.8 views

Sql injection

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...

6.5CVSS6.3AI score0.00514EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/01/27 5:30 p.m.58 views

CVE-2020-5428

Summary: CVE-2020-5428 affects Spring Cloud Task 2.2.4.RELEASE and earlier, with a reported SQL injection in the TaskExplorer lookup queries. The root cause is described as insufficient input validation in the PageRequest value used by JdbcTaskExecutionDao, potentially allowing arbitrary SQL exec...

6.5CVSS5.9AI score0.00514EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/27 5:30 p.m.31 views

CVE-2020-5428 Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer...

5.1CVSS6.3AI score0.00514EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.4 views

Vmware Spring Cloud Task Application Starters SQL Injection Vulnerability

Vmware Spring Cloud Task Application Starters is a codebase for managing and executing scheduled tasks from Vmware USA. The application runs as a standalone Spring Boot application and supports operations such as database migration, machine learning, and scheduled... A SQL injection vulnerability...

6.5CVSS6.1AI score0.00514EPSS
Exploits0References2
Rows per page
Query Builder