SP
Product
Springblade
9
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 1Medium 1Low 0
Watch
Add Springblade to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-70982 | 9.9 | Jan 26 | Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data Affected: 4.5.0 |
| CVE-2025-70983 | 9.9 | Jan 23 | Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges Affected: 4.5.0 |
| CVE-2024-8023 | 9.8 | Aug 20 | chillzhuang SpringBlade list sql injection Affected: through 4.1.0 |
| CVE-2023-47458 | 9.8 | Jan 2 | An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework Affected: through 3.7.0 |
| CVE-2023-40787 | 9.8 | Aug 29 | In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection Affected: 3.6.0 |
| CVE-2022-27360 | 9.8 | May 5 | SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment Affected: 3.2.0 |
| CVE-2020-16165 | 9.8 | Jul 30 | The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause Affected: through 2.7.1 |
Showing 7