GitHub Advisoryadvisory · Maven

GHSA-62pr-54gv-vg5g SpringBlade vulnerable to SQL injection

HIGH Published 2023-08-29 Modified 2023-08-31 Official page ↗
Aliases
CVE-2023-40787
Ecosystem
Maven
Packages
org.springblade:blade-core-tool
Severity
High
Weaknesses
CWE-89
Reviewed
2023-08-31

Affected packages

• Maven org.springblade:blade-core-tool: 3.6.0 (no fix yet)

Description

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

Related

Alias · CVE (1)

  • CVE-2023-40787 In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL… vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References