Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40787
HistoryAug 29, 2023 - 1:15 p.m.

Sql injection

2023-08-2913:15:00
PRIOn knowledge base
www.prio-n.com
6
springblade
sql query
parameters
user input
quotation marks
nvd

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

CPENameOperatorVersion
springbladeeq3.6.0

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

Related for PRION:CVE-2023-40787