CVE-2020-5427

—

CVSS 3.1

7.2 high

EPSS

1%p63

Published

Jan 27, 2021 (Jan 27, 2021)

Modified

Jun 17, 2026

Description

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

Vendors: vmware
Products: spring cloud data flow
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.