CVE-2025-70982

概要

参考情報

• gist.github.com/old6ma/ea60151aa40ddc1cfb51fbaa0c173117 · Third Party Advisory
• chillzhuang/SpringBlade · Product
• chillzhuang/SpringBlade · Exploit

springblade のその他の脆弱性

• CVE-2025-70983緊急 9.9Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.
• CVE-2024-8023緊急 9.8A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/bla…
• CVE-2024-33332高 7.5An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant…
• CVE-2023-47458緊急 9.8An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
• CVE-2023-40788中 5.3SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthoriz…