In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40787.json"