Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-5428

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

VectorNETWORK

PublishedJan 27, 2021, 18:15

Published Bysecurity@pivotal.io

Base Score

Score6

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.springframework.cloud:spring-cloud-task-dependencies(Maven)02.2.5N/A

References

https://tanzu.vmware.com/security/cve-2020-5428

Weakness Type

CWE-89

CVSS Metrics

Base Score

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK