In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.springblade:blade-core-tool(Maven) | N/A | N/A | N/A |
CVSS Metrics
