CVE-2022-27360

Description

References

• forum.butian.net/share/1089 · Exploit
• gitee.com/smallc/SpringBlade/blob/master/blade-service/blade-user/src/main/java/org/springblade/system/user/mapper/UserMapper.xml · Exploit
• saber.bladex.vip · Permissions Required

Weitere Schwachstellen in springblade

• CVE-2025-70982KRITISCH 9.9Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import s…
• CVE-2025-70983KRITISCH 9.9Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.
• CVE-2024-8023KRITISCH 9.8A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/bla…
• CVE-2024-33332HOCH 7.5An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant…
• CVE-2023-47458KRITISCH 9.8An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.