CVE-2026-36764 Details
Description
A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources via a crafted GET request.
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the SpringBlade framework, specifically in version 4.8.0 of the blade-report module, which integrates UReport2. The vulnerability exists in the '/ureport/datasource/testConnection' endpoint, where authenticated attackers can manipulate JDBC connection parameters to scan internal resources. The server-side logic directly executes user-supplied values without proper validation, allowing for unauthorized access to internal networks and services.
Users are advised to disable the '/ureport/datasource/testConnection' endpoint if it is not needed in production. For those who require this functionality, it is recommended to implement a whitelist for allowed JDBC drivers, sanitize JDBC URL parameters to remove dangerous options, and restrict connections to non-private or loopback addresses. Additionally, the 'LOAD DATA LOCAL INFILE' option should be disabled at the driver level by default.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 30, 2026CISA-ADP
Assessed Apr 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/chillzhuang/SpringBlade/issues/36 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/chillzhuang/SpringBlade | [email protected] | ProductSource CodeVendor |
| https://github.com/chillzhuang/SpringBlade/issues/36 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| SpringBlade | <= 4.8.0 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 30, 2026 | CVE Modified | CISA-ADP |
| Apr 30, 2026 | New CVE Received | [email protected] |