Vmware Spring Cloud Data Flow
2 CVEs affecting Vmware Spring Cloud Data Flow. Latest disclosed: 2024-07-25. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37084 | Critical | 9.8 | 2024-07-25 | In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arb… |
CVE-2020-5427 | High | 7.2 | 2021-01-27 | In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execut… |