Issues

• System Detail Endpoints Read Records Across Tenants Without a Tenant Guard

  chillzhuang/SpringBlade#42 · Filter by author czTangt opened on Sep 16, 2026

• Tenant Administrator Can Mutate Platform-Global Configuration via /param/submit

  chillzhuang/SpringBlade#41 · Filter by author czTangt opened on Sep 16, 2026

• Arbitrary File Read via Image Cell Path in SpringBlade blade-report /ureport/preview Endpoint

  chillzhuang/SpringBlade#40 · Filter by author B1cx opened on Jul 8, 2026
  1

• Stored XSS via XssHtmlFilter Bypass

  chillzhuang/SpringBlade#38 · Filter by author Arron-bit opened on Mar 11, 2026

• XXE via Report XML Parsing in SpringBlade blade-report /ureport/designer/loadReport Endpoint

  chillzhuang/SpringBlade#37 · Filter by author Arron-bit opened on Mar 11, 2026

• SSRF via JDBC Connection in SpringBlade blade-report /ureport/datasource/testConnection Endpoint

  chillzhuang/SpringBlade#36 · Filter by author Arron-bit opened on Mar 11, 2026

• MenuController.java:authRoutes中返回的路由需要对用户的租户身份进行检查

  chillzhuang/SpringBlade#35 · Filter by author old6ma opened on May 27, 2025

• UserController.java:importUser未鉴权，可能导致普通用户向数据库导入用户数据

  chillzhuang/SpringBlade#34 · Filter by author old6ma opened on May 14, 2025

• IV不应该等于key

  chillzhuang/SpringBlade#33 · Filter by author kexinoh opened on Dec 16, 2024

• sql 注入问题

  chillzhuang/SpringBlade#32 · Filter by author s-chance opened on Nov 22, 2024
  4

• Test code

  chillzhuang/SpringBlade#30 · Filter by author Imran-imtiaz48 opened on Oct 12, 2024

• 看到官网版本已经更新到4.0.1了

  chillzhuang/SpringBlade#29 · Filter by author HoneyZZZZ opened on Apr 10, 2024

• [sercurity vulnerability] SQL injection

  chillzhuang/SpringBlade#28 · Filter by author GatekeeperBuster opened on Apr 7, 2024
  1

• 如何修改用户和密码

  chillzhuang/SpringBlade#25 · Filter by author oneforalone opened on Aug 14, 2023

• 内有gateway的路由配置(routes)

  chillzhuang/SpringBlade#24 · Filter by author caixinglei opened on Jul 20, 2023

• 请问github和gitee上的代码是一样的吗？我看提交不一样

  chillzhuang/SpringBlade#22 · Filter by author haoxx1 opened on Jul 20, 2022
  3

• @BladeBootTest与@MockBean共同工作时会报错

  chillzhuang/SpringBlade#20 · Filter by author 605774644 opened on Mar 28, 2021

• 分页bug

  chillzhuang/SpringBlade#19 · Filter by author xzhf opened on Mar 10, 2021

• 当同一用户频繁调用查询语句时,会进行数据权限的缓存,这一部分代码在哪里呢?

  chillzhuang/SpringBlade#16 · Filter by author lmxzd opened on Nov 28, 2020

• 问题反馈流程说明

  chillzhuang/SpringBlade#12 · Filter by author chillzhuang opened on Sep 15, 2020

• Authorization bypass in blade-gateway

  chillzhuang/SpringBlade#8 · Filter by author s31k31 opened on Jul 7, 2020

• where is the test code ?

  chillzhuang/SpringBlade#5 · Filter by author tixo opened on Dec 24, 2019
  2