Sa-token Security Vulnerabilities and Issues — Sa-token CVE List

Lucene search

DromaraSa-token

2 matches found

CVE•added 2023/10/25 6:17 p.m.•81 views

CVE-2023-44794

An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.

9.8CVSS9.2AI score0.01961EPSS

CVE•added 2023/10/25 6:17 p.m.•35 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

8.8CVSS8.7AI score0.00096EPSS