CVE-2023-40788

概要

参考情報

• gist.github.com/kaliwin/89276ec7e97f9529c989bd77706c29c7 · Third Party Advisory
• chillzhuang/SpringBlade · Product
• chillzhuang/SpringBlade · Exploit

springblade のその他の脆弱性

• CVE-2025-70982緊急 9.9Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import s…
• CVE-2025-70983緊急 9.9Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.
• CVE-2024-8023緊急 9.8A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/bla…
• CVE-2024-33332高 7.5An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant…
• CVE-2023-47458緊急 9.8An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.