SpringBlade · Issues· 26 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #42
System Detail Endpoints Read Records Across Tenants Without a Tenant Guard
Updated Sep 16, 2026 - #41
Tenant Administrator Can Mutate Platform-Global Configuration via /param/submit
Updated Sep 16, 2026 - #40
Arbitrary File Read via Image Cell Path in SpringBlade blade-report /ureport/preview Endpoint
Updated Jul 8, 2026 - #38
Stored XSS via XssHtmlFilter Bypass
Updated Mar 11, 2026 - #37
XXE via Report XML Parsing in SpringBlade blade-report /ureport/designer/loadReport Endpoint
Updated Mar 11, 2026 - #36
SSRF via JDBC Connection in SpringBlade blade-report /ureport/datasource/testConnection Endpoint
Updated Mar 11, 2026 - #35
MenuController.java:authRoutes中返回的路由需要对用户的租户身份进行检查
Updated May 27, 2025 - #34
UserController.java:importUser未鉴权，可能导致普通用户向数据库导入用户数据
Updated May 14, 2025 - #33
IV不应该等于key
Updated Dec 16, 2024 - #32
sql 注入问题
Updated Dec 11, 2024 - #28
[sercurity vulnerability] SQL injection
Updated Nov 22, 2024 - #30
Test code
Updated Oct 12, 2024 - #29
看到官网版本已经更新到4.0.1了
Updated Sep 5, 2024 - #25
如何修改用户和密码
Updated Aug 14, 2023 - #24
内有gateway的路由配置(routes)
Updated Jul 21, 2023