CVE-2022-27360

SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-05

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Springblade (Bladex)

References

• https://forum.butian.net/share/1089
• https://gitee.com/smallc/SpringBlade/blob/master/blade-service/blade-user/src/main/java/org/springblade/system/user/map…
• https://saber.bladex.vip/#/login