Critical · 9.9 CVE-2025-70982 EUVD-2025-206355GHSA-3hxp-qjj8-fm85

Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import …

Published Jan 26, 2026 · Updated Jan 26, 2026 · Assigned by mitre

Description

Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data.

References

https://github.com/chillzhuang/SpringBlade
https://github.com/chillzhuang/SpringBlade/issues/34
https://gist.github.com/old6ma/ea60151aa40ddc1cfb51fbaa0c173117