2.11.2

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-25	CVE-2024-37084	Unspecified vulnerability in VMWare Spring Cloud Data Flow 2.11.0/2.11.1/2.11.2 In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server network low complexity vmware	8.8