← CVE Intelligence

CVE-2020-5427

Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query PUBLISHED

Description (CNA)

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

Affected (CNA)

Vendor / productVersions
Spring by VMware / Spring Cloud Data Flowaffected 2.6 before 2.6.5; affected 2.5 before 2.5.4

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.