← Back to CVE List

CVE-2020-16165

Published: 2020-07-30T20:15Z
Last Modified: 2024-11-21T05:06Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt