PT-2020-14787 · Springblade · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions prior to 2.7.2 Description: The issue concerns SQL Injection in the ORDER BY clause, related to the /api/blade-log/api/list endpoint, specifically the ascs and desc parameters. Recommendations: For versions prior to 2.7.2...