Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2023-47458
Disclosure Date: January 02, 2024 (last updated January 09, 2024)
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
0
Attacker Value
Unknown
CVE-2023-40788
Disclosure Date: September 19, 2023 (last updated October 08, 2023)
SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs
0
Attacker Value
Unknown
CVE-2023-40787
Disclosure Date: August 29, 2023 (last updated October 08, 2023)
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
0
Attacker Value
Unknown
CVE-2022-27360
Disclosure Date: May 05, 2022 (last updated October 07, 2023)
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.
0
