VendorsDromarasa-tokenall versions
Vulnerabilities

Dromara Sa-token

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-44794
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
Published 2023-10-25 · Modified
9.8EPSS 0.010
CVE-2023-43961
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
Published 2023-10-25 · Modified
8.8EPSS 0.008