PT-2021-12402
CVE-2020-5428
·
تاريخ النشر
2021-01-27
·
تاريخ التحديث
2022-02-09
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Spring Cloud Task versions 2.2.4.RELEASE and below
Description
The issue affects applications using certain versions of Spring Cloud Task, making them potentially vulnerable to SQL injection attacks when specific lookup queries are performed in the TaskExplorer.
Recommendations
For Spring Cloud Task versions 2.2.4.RELEASE and below, update to a version above 2.2.4.RELEASE to resolve the issue.
As a temporary workaround, consider restricting access to the TaskExplorer to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾