CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-04-30

Last modified

2025-03-27

Weaknesses

CWE-89

Affected products

• Springblade (Bladex)
• Springblade (Smallchill)

References

• https://github.com/wy876/cve/issues/3