Latest vulnerabilities for "vmware spring cloud data flow"

Where

Sort:

Versions

2.11.0

2.5.0

2.6.0

maven/org.springframework.cloud:spring-cloud-skipperRemote code execution in Spring Cloud Data Flow

Risk 89

Severity

9.8

Path Traversal, Code Injection

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server

1 / 2

Source: NVD

First published (updated )

CVE-2024-37084

VMware Spring Cloud Data FlowPossibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query

Risk 66

Severity

7.2

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

First published (updated )

CVE-2020-5427

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.