CVE-2023-47458

CriticalCVSS 9.8

Published: 02/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

46th percentile - higher than 46% of all known CVEs

Summary

In SpringBlade version 3.7.0 and earlier, a missing permission control framework allows a remote attacker to escalate privileges.

Risk Assessment

An attacker can gain unauthorized access to administrative functions and sensitive data, leading to a breach of system confidentiality and integrity.

Recommendation

Immediately update SpringBlade to the latest version that includes access control fixes and implement authorization mechanisms at the application level.

Original NVD description (English source)

An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.