Lucene search
+L

165 matches found

CNVD
CNVD
•added 2023/11/22 12:00 a.m.•12 views

SQL Injection Vulnerability in SpringBlade of Shanghai Breadtech Co. Ltd (CNVD-2023-101321)

SpringBlade is a well-designed microservices architecture that provides a full suite of SpringCloud solutions. Ltd. SpringBlade suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive database information...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2023/10/20 12:00 a.m.•10 views

Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94732)

SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2023/10/20 12:00 a.m.•6 views

Unauthorized Access Vulnerability in SpringBlade of Shanghai Bred Technology Co. Ltd (CNVD-2023-94731)

SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. An unauthorized access vulnerability exists in SpringBlade, which can be exploited by an attacker to obtain sensitive information...

6.8AI score
SaveExploits0
NVD
NVD
•added 2023/09/19 12:15 a.m.•41 views

CVE-2023-40788

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

5.3CVSS5.2AI score0.00769EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/19 12:15 a.m.•9 views

CVE-2023-40788

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

5.3CVSS6AI score0.00769EPSS
SaveExploits1References4
Prion
Prion
•added 2023/09/19 12:15 a.m.•36 views

Design/Logic Flaw

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

5CVSS5.2AI score0.00769EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/09/18 12:00 a.m.•21 views

SpringBlade Security Vulnerability

Bred Network Technology SpringBlade is a suite of microservice development platforms from China's Bred Network Technology. A security vulnerability exists in SpringBlade V3.6.0 and earlier versions, which stems from an incorrect configuration in the default gateway that allows unauthorized...

5.3CVSS6.7AI score0.00769EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/18 12:00 a.m.•17 views

PT-2023-27638 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions =V3.6.0 Description: The issue is related to Incorrect Access Control due to an incorrect configuration in the default gateway, resulting in unauthorized access to error logs. Recommendations: For SpringBlade versions...

5.3CVSS5AI score0.00769EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2023/09/18 12:00 a.m.•20 views

CVE-2023-40788

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

6.7AI score0.00769EPSS
SaveExploits1References3
CVE
CVE
•added 2023/09/18 12:00 a.m.•63 views

CVE-2023-40788

SpringBlade 3.6.0 to remediate.

5.3CVSS5.1AI score0.00769EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/09/18 12:00 a.m.•25 views

CVE-2023-40788

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

6.9AI score
SaveExploits0References5
Mend
Mend
•added 2023/09/18 12:00 a.m.•0 views

CVE-2023-40788

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

6.9CVSS0.00769EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/18 12:00 a.m.•3 views

CVE-2023-40788: Exposure of Resource to Wrong Sphere

SpringBlade =V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs...

5.3CVSS6AI score0.00769EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2023/08/29 3:31 p.m.•44 views

SpringBlade vulnerable to SQL injection

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

9.8CVSS7.9AI score0.18161EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/08/29 3:31 p.m.•76 views

GHSA-62PR-54GV-VG5G SpringBlade vulnerable to SQL injection

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

9.8CVSS5.9AI score0.18161EPSS
SaveExploits0References4
NVD
NVD
•added 2023/08/29 1:15 p.m.•47 views

CVE-2023-40787

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

9.8CVSS9.8AI score0.18161EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/29 1:15 p.m.•11 views

CVE-2023-40787

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

9.8CVSS7.3AI score0.18161EPSS
SaveExploits0References3
Prion
Prion
•added 2023/08/29 1:15 p.m.•34 views

Sql injection

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

7.5CVSS9.8AI score0.18161EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/08/29 12:00 a.m.•35 views

SpringBlade SQL注入漏洞

Breed Network Technology SpringBlade is a set of microservice development platform from China Breed Network Technology. A security vulnerability exists in SpringBlade version V3.6.0, which stems from a SQL injection when executing a SQL query, where the parameters submitted by the user are not...

9.8CVSS8.6AI score0.18161EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/08/29 12:00 a.m.•19 views

CVE-2023-40787

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection...

7.6AI score0.18161EPSS
SaveExploits0References2
Rows per page
Query Builder