CVE-2022-27360 - SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment

CRITICAL

SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment

Published May 5, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.05%

SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-31863		Advisory
https://forum.butian.net/share/1089		x_refsource_MISCExploitThird Party Advisory
https://gitee.com/smallc/SpringBlade/blob/master/blade-service/blade-user/src/main/java/org/springblade/system/user/mapper/UserMapper.xml		x_refsource_MISCExploitThird Party Advisory
https://saber.bladex.vip/#/login		x_refsource_MISCPermissions RequiredThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 5, 2022

Updated Aug 3, 2024

Reserved Mar 21, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 5, 2022

Updated Aug 3, 2024

GitHub

No data