Description
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.
Remediation
References
https://tanzu.vmware.com/security/cve-2020-5428
Related Vulnerabilities
CVE-2023-47440 Vulnerability in npm package gladys
CVE-2020-15215 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-22696 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-oauth2
CVE-2021-39185 Vulnerability in maven package org.http4s:http4s-server
CVE-2017-17485 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind