Vmware Spring Cloud Data Flow vulnerabilities

2 vulnerabilities

Known vulnerabilities in Vmware Spring Cloud Data Flow, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2020-5427spring by vmwarespring cloud data flow+1
EPSS score
1.06%
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.9.8CVE-2024-37084org.springframework.cloudspring-cloud-skipper+2
EPSS score
35.21%
In Spring Cloud Data Flow versions prior to 2.11.4,  a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server