148 matches found
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
SpringBlade Security Vulnerability
Bred Network Technology SpringBlade is China Bred Network Technology Company's set of microservice development platform. SpringBlade v.3.7.0 and previous versions of security vulnerabilities, the vulnerability stems from the SpringBlade does not implement the rights control framework, user rights...
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
CVE-2023-47458: Missing Authorization
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework...
PT-2024-13453 · Unknown · Springblade
Name of the Vulnerable Software and Affected Versions: SpringBlade versions 3.7.0 and earlier Description: An issue in the software allows a remote attacker to escalate privileges via the lack of permissions control framework. This enables the attacker to gain elevated access without proper...
SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2024-0586935)
SpringBlade is a development framework based on Spring Spring SpringMVC Beetl Beetlsql Shiro . Ltd SpringBlade has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...
SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2023-101321)
SpringBlade is a well-designed microservices architecture that provides a full suite of SpringCloud solutions. Ltd. SpringBlade suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...
Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94731)
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...
Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94732)
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...
CVE-2023-40788
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
CVE-2023-40788
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
Design/Logic Flaw
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
CVE-2023-40788: Exposure of Resource to Wrong Sphere
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
CVE-2023-40788
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
CVE-2023-40788
SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...
PT-2023-27638 · Unknown · Springblade
Name of the Vulnerable Software and Affected Versions: SpringBlade versions =V3.6.0 Description: The issue is related to Incorrect Access Control due to an incorrect configuration in the default gateway, resulting in unauthorized access to error logs. Recommendations: For SpringBlade versions...
CVE-2023-40788
SpringBlade 3.6.0 to remediate.
SpringBlade Security Vulnerability
Bred Network Technology SpringBlade is a suite of microservice development platforms from China's Bred Network Technology. A security vulnerability exists in SpringBlade V3.6.0 and earlier versions, which stems from an incorrect configuration in the default gateway that allows unauthorized...
SpringBlade vulnerable to SQL injection
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...
GHSA-62PR-54GV-VG5G SpringBlade vulnerable to SQL injection
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...