Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query
CVE-2020-5427
5.7MEDIUM
What is CVE-2020-5427?
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
Affected Version(s)
Spring Cloud Data Flow 2.6 < 2.6.5
Spring Cloud Data Flow 2.5 < 2.5.4