CVE-2020-5427 – Possibility of SQL Injection in Spring Cloud Data Flow Task Execution Sorting Query

https://notcve.org/view.php?id=CVE-2020-5427

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution. En Spring Cloud Data Flow, versiones 2.6.x anteriores a 2.6.5, versiones 2.5.x anteriores a 2.5.4, una aplicación es vulnerable a una inyección SQL cuando es requerida una ejecución de tareas • https://tanzu.vmware.com/security/cve-2020-5427 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •