CVE-2023-43961

2023-10-2500:00:00

mitre

www.cve.org

dromara satoken

authentication bypass

spring dynamic controllers

AI Score

Confidence

High

EPSS

0.001

Percentile

24.1%

JSON

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

References

github.com/dromara/Sa-Token/issues/511