CVE-2025-70982: Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data.

PriorityP359critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.30%

21.2th percentile

Incorrect access control in the importUser function of SpringBlade v4.5.0 allows attackers with low-level privileges to arbitrarily import sensitive user data.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
bladex	springblade	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.