Spring Cloud Skipper vulnerabilities

1 known vulnerability in Spring Cloud Skipper from Spring by VMware Tanzu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Spring Cloud Skipper: Unrestricted Upload of File with Dangerous Type

  CVE-2024-22263Jun 19, 2024Spring by VMware TanzuEPSS 17.5%

  Spring Cloud Data Flow is a microservices-based Streaming and Batch data processing in Cloud Foundry and Kubernetes. The Skipper server has the ability to receive upload package requests. However, due to improper sanitization for upload path, a malicious user