Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 1.1%
exploitation probability
1.1%top 39% of all CVEs
observed exploitation
nono source reports it
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L
Affected products
Spring by VMware · Spring Cloud Data Flow