CVE-2025-70983

概要

参考情報

• gist.github.com/old6ma/9c4d2ba32cd8f562cb80796538157912 · Third Party Advisory
• chillzhuang/SpringBlade · Product
• chillzhuang/SpringBlade · Issue Tracking

springblade のその他の脆弱性

• CVE-2025-70982緊急 9.9Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import s…
• CVE-2024-8023緊急 9.8A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/bla…
• CVE-2024-33332高 7.5An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant…
• CVE-2023-47458緊急 9.8An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
• CVE-2023-40788中 5.3SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthoriz…