Skip to content
Threat Feed
Subscribe

Vendor

SpringBlade

1 brief RSS
high advisory

SpringBlade Privilege Escalation via Hardcoded JWT Key and Unprotected Endpoint

SpringBlade versions 2.7.3 through 3.5.0 allow authenticated attackers to forge administrative tokens using a hardcoded JWT signing key and escalate privileges via an unprotected internal endpoint.

SpringBlade vulnerability privilege-escalation authentication-bypass
2t 1c