https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70982.htmlhttps://patchthecve.com/cve/CVE-2025-70982.htmlWed, 17 Jun 2026 10:03:30 +0000CRITICAL 9.9: Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data.https://patchthecve.com/cve/CVE-2025-70983.htmlhttps://patchthecve.com/cve/CVE-2025-70983.htmlWed, 17 Jun 2026 10:03:30 +0000CRITICAL 9.9: Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.https://patchthecve.com/cve/CVE-2024-8023.htmlhttps://patchthecve.com/cve/CVE-2024-8023.htmlWed, 17 Jun 2026 08:21:42 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Affected is an unknown function of the file /api/blade-system/menu/list?updatexml. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publhttps://patchthecve.com/cve/CVE-2024-33332.htmlhttps://patchthecve.com/cve/CVE-2024-33332.htmlWed, 17 Jun 2026 07:31:40 +0000HIGH 7.5: An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant.