In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...
9.8CVSS7.3AI score0.19377EPSS
SaveExploits0References1
RedhatCVE•added 2025/05/22 10:36 p.m.•9 views
CVE-2022-27360
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment...