high7.5
CVE-2024-33332
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant.
Impact
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bladex | Springblade | Version 3.7.1 |