Search results

Stored XSS via XssHtmlFilter Bypass

Status: Open.

#38 In chillzhuang/SpringBlade;

· Arron-bit opened on Mar 11, 2026

XXE via Report XML Parsing in SpringBlade blade-report /ureport/designer/loadReport Endpoint

Status: Open.

#37 In chillzhuang/SpringBlade;

· Arron-bit opened on Mar 11, 2026

SSRF via JDBC Connection in SpringBlade blade-report /ureport/datasource/testConnection Endpoint

Status: Open.

#36 In chillzhuang/SpringBlade;

· Arron-bit opened on Mar 11, 2026

MenuController.java:authRoutes中返回的路由需要对用户的租户身份进行检查

Status: Open.

#35 In chillzhuang/SpringBlade;

· old6ma opened on May 27, 2025

UserController.java:importUser未鉴权，可能导致普通用户向数据库导入用户数据

Status: Open.

#34 In chillzhuang/SpringBlade;

· old6ma opened on May 14, 2025

IV不应该等于key

Status: Open.

#33 In chillzhuang/SpringBlade;

· kexinoh opened on Dec 16, 2024

sql 注入问题

Status: Open.

#32 In chillzhuang/SpringBlade;

· s-chance opened on Nov 22, 2024

Test code

Status: Open.

#30 In chillzhuang/SpringBlade;

· Imran-imtiaz48 opened on Oct 12, 2024

看到官网版本已经更新到4.0.1了

Status: Open.

#29 In chillzhuang/SpringBlade;

· HoneyZZZZ opened on Apr 10, 2024

[sercurity vulnerability] SQL injection

Status: Open.

#28 In chillzhuang/SpringBlade;

· GatekeeperBuster opened on Apr 7, 2024

如何修改用户和密码

Status: Open.

#25 In chillzhuang/SpringBlade;

· oneforalone opened on Aug 14, 2023

内有gateway的路由配置(routes)

Status: Open.

#24 In chillzhuang/SpringBlade;

· caixinglei opened on Jul 20, 2023