Description
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
Remediation
References
https://tanzu.vmware.com/security/cve-2020-5427
Related Vulnerabilities
CVE-2019-10389 Vulnerability in maven package org.jenkins-ci.plugins:relution-publisher
CVE-2020-5219 Vulnerability in npm package angular-expressions
CVE-2014-0119 Vulnerability in maven package org.apache.tomcat:tomcat-util-scan
CVE-2019-12407 Vulnerability in maven package org.apache.jspwiki:jspwiki-war
CVE-2023-32980 Vulnerability in maven package org.jenkins-ci.plugins:email-ext