CVE-2020-5428

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Score

CVSS 3.1 6.0 Medium

Status

Modified - security@pivotal.io

Published

2021-01-27

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Spring Cloud Task (Spring By Vmware)
• Spring Cloud Task (Vmware)

References

• https://tanzu.vmware.com/security/cve-2020-5428