Critical severity · published Aug 29, 2023
CVE-2023-40787
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection
9.8
CVSS
18.2%
EPSS
No
On KEV
Description
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)18.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Springblade · Bladex
3.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40787
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40787
Third Party Advisory
https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460
Permissions Required
https://sword.bladex.cn/
More from Springblade
9.9
CVE-2025-70982
Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data
9.9
CVE-2025-70983
Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges
9.8
CVE-2024-8023
chillzhuang SpringBlade list sql injection
9.8
CVE-2023-47458
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework
9.8
CVE-2022-27360
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment