Description
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spring by VMware | Spring Cloud Data Flow | 2.6 – < 2.6.5, 2.5 – < 2.5.4 | 2.6.5 |