Maven package
cn.dev33/sa-token-core
pkg:maven/cn.dev33/sa-token-core
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-44794 | — | < 1.37.0 | 1.37.0 | Oct 25, 2023 | An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL. | ||
| CVE-2023-43961 | — | < 1.36.0 | 1.36.0 | Oct 25, 2023 | An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass. |
- CVE-2023-44794Oct 25, 2023affected < 1.37.0fixed 1.37.0
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
- CVE-2023-43961Oct 25, 2023affected < 1.36.0fixed 1.36.0
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.