Sureness Security Vulnerabilities - February

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.

CVE-2024-3928

A vulnerability was found in Dromara open-capacity-platform 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /actuator/heapdump of the component auth-server. The manipulation leads to information disclosure. The attack can be launche...