Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29171
HistoryJan 28, 2021 - 5:02 a.m.

SQL Injection

2021-01-2805:02:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

38.7%

spring-cloud-task-core is vulnerable to SQL injection. Lack of validation of the value that is passed via a PageRequest into the JdbcTaskExecutionDao potentially allows for execution of arbitrary SQL statements.

CPENameOperatorVersion
spring cloud task corele2.2.4.RELEASE

0.001 Low

EPSS

Percentile

38.7%

Related for VERACODE:29171