high7.2
CVE-2020-5427
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execut…
Impact
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Spring Cloud Data Flow | from 2.5.0 before 2.5.4 from 2.6.0 before 2.6.5 |