CVE-2023-40787: Bladex Springblade

Critical severity, CVSS 9.8. EPSS: 18.2% chance of exploitation in the next 30 days.

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

Affected products

• Bladex Springblade: version 3.6.0 only

Published 2023-08-29. Last modified 2026-06-17.