Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:springblade:springblade:3.5.0:*:*:*:*:*:*:*

1 brief RSS
high advisory

SpringBlade Privilege Escalation via Hardcoded JWT Key and Unprotected Endpoint

SpringBlade versions 2.7.3 through 3.5.0 allow authenticated attackers to forge administrative tokens using a hardcoded JWT signing key and escalate privileges via an unprotected internal endpoint.

SpringBlade vulnerability privilege-escalation authentication-bypass
2t 1c