Skip to content
OpenAdvisories

Vendor

SpringBlade

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

    SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creat…