SpringBlade is a microservice architecture that has been optimized from a commercial-grade project. It is built using core technologies such as Spring Boot 4, Spring Cloud 2025, and Java 21, and fully adheres to Alibaba's coding standards. It provides two front-end frameworks based on React and Vue for quickly building enterprise-grade SaaS multi-tenant microservice platforms.
The project is located at...
System Detail Endpoints Read Records Across Tenants Without a Tenant Guard
Tenant Administrator Can Mutate Platform-Global Configuration via /param/submit
Arbitrary File Read via Image Cell Path in SpringBlade blade-report /ureport/preview Endpoint
Stored XSS via XssHtmlFilter Bypass
XXE via Report XML Parsing in SpringBlade blade-report /ureport/designer/loadReport Endpoint
SSRF via JDBC Connection in SpringBlade blade-report /ureport/datasource/testConnection Endpoint
MenuController.java:authRoutes中返回的路由需要对用户的租户身份进行检查
UserController.java:importUser未鉴权，可能导致普通用户向数据库导入用户数据
IV不应该等于key
sql 注入问题