CVE-2020-5427

2021-01-2718:15:13

Google

osv.dev

spring cloud data flow

sql injection

task execution

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

38.0%

JSON

In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.

References

tanzu.vmware.com/security/cve-2020-5427