Vendor

org.springblade vulnerabilities

1 published CVE affecting org.springblade, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Atom feed of org.springblade alerts

Products

org.springblade/blade-core-tool 1

Latest org.springblade CVEs

Newest publication first

CVE-2023-40787 SpringBlade vulnerable to SQL injection
Published 2023-08-29

CriticalCVSS 9.8 EPSS 18.2%

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.springblade vulnerabilities

Products

Latest org.springblade CVEs

CVE-2023-40787 SpringBlade vulnerable to SQL injection