CVE-2023-40787: SQL Injection
Published Aug 29, 2023
·Updated
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
Affected Software
2 affected components
maven/org.springblade:blade-core-tool=3.6.0
Bladex Springblade=3.6.0
Event History
Aug 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
03:31 PM
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-40787.
2
What is the severity level of CVE-2023-40787?
CVE-2023-40787 has a severity level of critical.
3
What is the description of CVE-2023-40787?
CVE-2023-40787 is a SQL injection vulnerability in SpringBlade V3.6.0, where the parameters submitted by the user are not wrapped in quotation marks.
4
How does CVE-2023-40787 affect the software?
CVE-2023-40787 affects SpringBlade V3.6.0.
5
How can I fix CVE-2023-40787?
To fix CVE-2023-40787, it is recommended to update to the latest version of SpringBlade.