117 matches found
SQL Injection Vulnerability in springblade Framework of Shanghai Breadtech Co.
Ltd. is a software technology-oriented enterprise with high-end software technology consulting and microservice technology architecture design as its main business. Ltd springblade framework has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...
CVE-2024-33332
The CVE-2024-33332 entry affects SpringBlade 3.7.1, where a crafted GET request to the endpoint api/blade-system/tenant can disclose sensitive information. The connected sources consistently describe an information disclosure in SpringBlade 3.7.1 without broader exploitation details. Impact is de...
SpringBlade 安全漏洞
Breed Network Technology SpringBlade is a suite of microservice development platforms from China's Breed Network Technology. A security vulnerability exists in SpringBlade version 3.7.1, which stems from a vulnerability that allows an attacker to obtain sensitive information via a crafted GET...
PT-2024-25208 · Unknown · Springblade
Name of the Vulnerable Software and Affected Versions: SpringBlade version 3.7.1 Description: An issue in SpringBlade allows attackers to obtain sensitive information via a crafted GET request to the "api/blade-system/tenant" endpoint. The api/blade-system/tenant endpoint is vulnerable to this...
SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co.
SpringBlade is a microservice architecture upgraded and optimized from a commercial-grade project, built with core technologies such as Spring Boot 2.5 and Spring Cloud 2020, and fully following Alibaba coding standards. Ltd. SpringBlade exists SQL injection vulnerability, attackers can use the...
Information leakage vulnerability in springblade of Shanghai Breadtech Co.
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. Ltd springblade has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
CVE-2023-47458
CVE-2023-47458 concerns SpringBlade versions 3.7.0 and earlier. The issue is described as a lack of a permissions control framework, which enables a remote attacker to escalate privileges (high impact). The CVSS vector from NVD indicates a critical score (9.8), with network attack vector, no user...
PT-2024-13453 · Unknown · Springblade
Name of the Vulnerable Software and Affected Versions: SpringBlade versions 3.7.0 and earlier Description: An issue in the software allows a remote attacker to escalate privileges via the lack of permissions control framework. This enables the attacker to gain elevated access without proper...
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
SpringBlade Security Vulnerability
Bred Network Technology SpringBlade is China Bred Network Technology Company's set of microservice development platform. SpringBlade v.3.7.0 and previous versions of security vulnerabilities, the vulnerability stems from the SpringBlade does not implement the rights control framework, user rights...
SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2024-0586935)
SpringBlade is a development framework based on Spring Spring SpringMVC Beetl Beetlsql Shiro . Ltd SpringBlade has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2023-101321)
SpringBlade is a well-designed microservices architecture that provides a full suite of SpringCloud solutions. Ltd. SpringBlade suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...
Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94731)
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...