2023-09-19 04:00:27 +00:00

28 lines
895 B
JSON

{
"id": "CVE-2023-40788",
"sourceIdentifier": "cve@mitre.org",
"published": "2023-09-19T00:15:34.993",
"lastModified": "2023-09-19T03:37:18.983",
"vulnStatus": "Undergoing Analysis",
"descriptions": [
{
"lang": "en",
"value": "SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs"
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/kaliwin/89276ec7e97f9529c989bd77706c29c7",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/chillzhuang/SpringBlade",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/chillzhuang/SpringBlade/blob/master/blade-gateway/src/main/java/org/springblade/gateway/provider/AuthProvider.java",
"source": "cve@mitre.org"
}
]
}