Skip to content
OpenAdvisories

Vendor

chillzhuang

4 known vulnerabilities.

Products

SpringBlade 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-105610

    chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

    A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Managem…

    chillzhuang SpringBlade
  • Medium 6.3
    CVE-2026-97368

    chillzhuang SpringBlade user-auth-info Endpoint UserServiceImpl.java UserServiceImpl.userInfo authorization

    A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java of the component user-auth-…

    chillzhuang SpringBlade
  • Medium 6.3
    CVE-2024-8023

    chillzhuang SpringBlade list sql injection

    A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/blade-system/menu/list?updatexml. The manipulation leads to sql injection. It is possible to launch the attack remotely. T…

    chillzhuang SpringBlade