Springblade
CVE-2025-70983
CRITICAL
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 9.9 — SpringBlade is a Java microservices framework popular in Chinese enterprises. Privilege escalation in the auth layer compromises all services built on the framework. |
| Exploit ScenarioDerived | A low-privileged user manipulates authentication routing to access admin endpoints, escalating their privileges and gaining control over all SpringBlade microservices. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
SpringBlade v4.5.0 has an access control flaw in authRoutes allowing low-privileged users to escalate to admin through the authentication routing mechanism.
Earlier versions of this analysis (1)
Privilege escalation in SpringBlade framework via authentication route bypass.
RemediationAI
Update SpringBlade. Review route authorization configurations.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
SpringBlade v4.5.0 has a CWE-284 incorrect access control vulnerability in the authRoutes function that allows users with low-level privileges to access administrative routes and escalate their permissions.
Know when Springblade gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
Incorrect access control in the authRoutes function of SpringBlade v4.5.0 allows attackers with low-level privileges to escalate privileges.
Executive ViewAI
CVE-2025-70983 is a critical privilege escalation vulnerability in SpringBlade v4.5.0 that allows attackers with basic system access to gain elevated privileges and full application control. Organizations running this version face immediate risk of unauthorized access to sensitive data, system compromise, and potential lateral movement across infrastructure. With no patch currently available, immediate action is required to protect systems and data.
Implement Web Application Firewall (WAF) rules to monitor and block suspicious authentication requests targeting authRoutes; apply strict network segmentation to limit access to SpringBlade instances; enable multi-factor authentication for all privileged accounts; implement role-based access control (RBAC) restrictions at the application level; deploy intrusion detection systems (IDS) configured to alert on privilege escalation patterns; disable authRoutes endpoints that are non-critical to business operations; enforce real-time security monitoring and alerting on authentication and authorization events; consider running affected systems in a restricted security zone with enhanced access controls.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
Affected Products (CPE)CVE.org
More in Springblade
View allAccess control bypass in SpringBlade v4.5.0 importUser function allows low-privileged users to import sensitive user dat
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.
The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. Rated critical sever
Privilege escalation in SpringBlade 2.7.3 through 3.5.0 lets authenticated low-privilege users forge admin JWT tokens us
An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions c
In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks,
A vulnerability classified as critical has been found in chillzhuang SpringBlade 4.1.0. Rated medium severity (CVSS 5.3)
SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway res
Authorization bypass in SpringBlade through 5.0.2 lets attackers read other users' account information by supplying an a
Improper authorization in SpringBlade up to 5.0.1 allows an authenticated remote user to access role or user detail reco
Improper authorization in the SpringBlade Java microservice framework (all versions up to 5.0.1) lets an authenticated u
Exploit-DB