CVE-2020-5428: VMware Spring Cloud Task

Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days.

In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.

Affected products

• VMware Spring Cloud Task: up to and including 2.2.4

Published 2021-01-27. Last modified 2026-06-17.