CVE-2023-40787

n/a / n/a PUBLISHED

Description (CNA)

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://sword.bladex.cn/
https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460

ADP enrichment

CVE

No English description supplied.

https://sword.bladex.cn/
https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460

CISA-ADP

No English description supplied.

No references supplied.