Description
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spring by VMware | Spring Cloud Task | 2.2 – < 2.2.5 | 2.2.5 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.springframework.cloud:spring-cloud-task-dependencies | < 2.2.5 | 2.2.5 | GHSA-878w-7gxp-mc63 |