Lucene search
K

117 matches found

CNVD
CNVD
added 2024/05/31 12:0 a.m.2 views

SQL Injection Vulnerability in springblade Framework of Shanghai Breadtech Co.

Ltd. is a software technology-oriented enterprise with high-end software technology consulting and microservice technology architecture design as its main business. Ltd springblade framework has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database...

7.8AI score
Exploits0
NVD
NVD
added 2024/04/30 8:15 p.m.7 views

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

7.5CVSS6AI score0.00179EPSS
Exploits1References1
OSV
OSV
added 2024/04/30 8:15 p.m.1 views

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

7.5CVSS6.5AI score
Exploits0References1
Cvelist
Cvelist
added 2024/04/30 12:0 a.m.17 views

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

6.2AI score0.00179EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/04/30 12:0 a.m.13 views

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

6.4AI score0.00179EPSS
Exploits1References1
CVE
CVE
added 2024/04/30 12:0 a.m.80 views

CVE-2024-33332

The CVE-2024-33332 entry affects SpringBlade 3.7.1, where a crafted GET request to the endpoint api/blade-system/tenant can disclose sensitive information. The connected sources consistently describe an information disclosure in SpringBlade 3.7.1 without broader exploitation details. Impact is de...

7.5CVSS6.2AI score0.00179EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/04/30 12:0 a.m.2 views

SpringBlade 安全漏洞

Breed Network Technology SpringBlade is a suite of microservice development platforms from China's Breed Network Technology. A security vulnerability exists in SpringBlade version 3.7.1, which stems from a vulnerability that allows an attacker to obtain sensitive information via a crafted GET...

7.5CVSS6.4AI score0.00179EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/04/30 12:0 a.m.1 views

PT-2024-25208 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade version 3.7.1 Description: An issue in SpringBlade allows attackers to obtain sensitive information via a crafted GET request to the "api/blade-system/tenant" endpoint. The api/blade-system/tenant endpoint is vulnerable to this...

7.5CVSS5.8AI score0.00179EPSS
Exploits1References8
CNVD
CNVD
added 2024/04/16 12:0 a.m.5 views

SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co.

SpringBlade is a microservice architecture upgraded and optimized from a commercial-grade project, built with core technologies such as Spring Boot 2.5 and Spring Cloud 2020, and fully following Alibaba coding standards. Ltd. SpringBlade exists SQL injection vulnerability, attackers can use the...

7.8AI score
Exploits0
CNVD
CNVD
added 2024/03/02 12:0 a.m.5 views

Information leakage vulnerability in springblade of Shanghai Breadtech Co.

SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. Ltd springblade has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

6.5AI score
Exploits0
NVD
NVD
added 2024/01/02 9:15 p.m.10 views

CVE-2023-47458

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...

9.8CVSS9.6AI score0.00924EPSS
Exploits0References3
OSV
OSV
added 2024/01/02 9:15 p.m.15 views

CVE-2023-47458

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...

9.8CVSS7.2AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/01/02 12:0 a.m.4 views

CVE-2023-47458

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...

9.6AI score0.00924EPSS
Exploits0References3
CVE
CVE
added 2024/01/02 12:0 a.m.46 views

CVE-2023-47458

CVE-2023-47458 concerns SpringBlade versions 3.7.0 and earlier. The issue is described as a lack of a permissions control framework, which enables a remote attacker to escalate privileges (high impact). The CVSS vector from NVD indicates a critical score (9.8), with network attack vector, no user...

9.8CVSS9.5AI score0.00924EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/02 12:0 a.m.3 views

PT-2024-13453 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions 3.7.0 and earlier Description: An issue in the software allows a remote attacker to escalate privileges via the lack of permissions control framework. This enables the attacker to gain elevated access without proper...

9.8CVSS9.6AI score0.00924EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/01/02 12:0 a.m.9 views

CVE-2023-47458

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...

9.8AI score0.00924EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.1 views

SpringBlade Security Vulnerability

Bred Network Technology SpringBlade is China Bred Network Technology Company's set of microservice development platform. SpringBlade v.3.7.0 and previous versions of security vulnerabilities, the vulnerability stems from the SpringBlade does not implement the rights control framework, user rights...

9.8CVSS7AI score0.00924EPSS
Exploits0References4
CNVD
CNVD
added 2023/12/22 12:0 a.m.6 views

SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2024-0586935)

SpringBlade is a development framework based on Spring Spring SpringMVC Beetl Beetlsql Shiro . Ltd SpringBlade has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

7.4AI score
Exploits0
CNVD
CNVD
added 2023/11/22 12:0 a.m.2 views

SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2023-101321)

SpringBlade is a well-designed microservices architecture that provides a full suite of SpringCloud solutions. Ltd. SpringBlade suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...

7.7AI score
Exploits0
CNVD
CNVD
added 2023/10/20 12:0 a.m.1 views

Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94731)

SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...

6.8AI score
Exploits0
Rows per page
Query Builder