dromara

Records66All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

dromara records in CISA KEV

No dromara vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ruoyi-vue-plus 2 records HIGH Sa-token 2 records HIGH Hutool 1 record HIGH Sureness 1 record HIGH

Records

2 records in Sa-token · all components

TI-2023-24001 CVE-2023-44794 · GHSA-54f6-9mx9-86f7

An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to…

HIGH 82

An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01334 Published 2023-10-25 Fixed in 1.37.0 CWE-284

TI-2023-23575 CVE-2023-43961 · GHSA-w9vh-hv5g-7wmr

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic…

HIGH 73

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01003 Published 2023-10-25 Fixed in 1.36.0 CWE-863

Open these records in search →

Critical	11
High	20
Medium	31
Low	4
No CVSS	0