cbcvebase.

Spring Cloud Data Flow vulnerabilities

1 known vulnerability affecting spring/spring_cloud_data_flow.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-37084P2HIGHCVSS 8.8≥ 2.11.x, < 2.11.42024-07-25
CVE-2024-37084 [HIGH] CWE-94 CVE-2024-37084: In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server
nvd
Spring Cloud Data Flow vulnerabilities | cvebase