{"id":"CVE-2020-5427","details":"In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.","aliases":["BIT-spring-cloud-dataflow-2020-5427"],"modified":"2026-08-27T08:39:56.218941Z","published":"2021-01-27T18:15:13.043Z","references":[{"type":"ADVISORY","url":"https://tanzu.vmware.com/security/cve-2020-5427"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/spring-attic/spring-cloud-dataflow","events":[{"introduced":"1a552fe6711dada5a4536c2fb383f0d44945756c"},{"fixed":"7b8b94ae5f7d08b8bb1a868e8c65da01f2bc1520"},{"introduced":"2aba9ed403f5c4793b718bdd4352a48a4a0195be"},{"fixed":"28f287093ec64011ab9de6e81f408b3fd6b33f97"}],"database_specific":{"cpe":"cpe:2.3:a:vmware:spring_cloud_data_flow:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.5.0"},{"fixed":"2.5.4"},{"introduced":"2.6.0"},{"fixed":"2.6.5"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5427.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}