High severity7.2NVD Advisory· Published Jan 27, 2021· Updated Jun 17, 2026

CVE-2020-5427

Description

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Spring Cloud Data Flow
cpe:2.3:a:vmware:spring_cloud_data_flow:*:*:*:*:*:*:*:*
Range: >=2.5.0,<2.5.4
Spring Cloud/Data Flowllm-create
Range: <2.6.5, <2.5.4
osv-coords
pkg:bitnami/spring-cloud-dataflow
Range: >= 2.5.0, < 2.5.4
Spring by VMware/Spring Cloud Data Flowv5
Range: 2.6

Patches

Vulnerability mechanics

References

tanzu.vmware.com/security/cve-2020-5427nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000