Medium severity5.3NVD Advisory· Published Sep 19, 2023· Updated Jun 17, 2026

CVE-2023-40788

Description

SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bladex/Springblade
cpe:2.3:a:bladex:springblade:*:*:*:*:*:*:*:*
Range: <=3.6.0
SpringBlade/SpringBladedescription
SpringBlade/SpringBladellm-fuzzy
Range: <=V3.6.0

Patches

Vulnerability mechanics

References

github.com/chillzhuang/SpringBlade/blob/master/blade-gateway/src/main/java/org/springblade/gateway/provider/AuthProvider.javanvdExploit
gist.github.com/kaliwin/89276ec7e97f9529c989bd77706c29c7nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000