CVE-2020-5428

Possibility of SQL Injection in Spring Cloud Task Execution Sorting Query PUBLISHED

Description (CNA)

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Affected (CNA)

Vendor / product	Versions
Spring by VMware / Spring Cloud Task	affected 2.2 before 2.2.5

CWE

CWE-89

References

https://tanzu.vmware.com/security/cve-2020-5428

ADP enrichment

CVE

No English description supplied.

https://tanzu.vmware.com/security/cve-2020-5428