Skip to content
OpenAdvisories

Package · Maven

cn.dev33:sa-token-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2023-44794

    SaToken privilege escalation vulnerability

    An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.

    cn.dev33:sa-token-core Maven
  • High 8.8
    CVE-2023-43961

    SaToken authentication bypass vulnerability

    An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

    cn.dev33:sa-token-core Maven