Skip to content
OpenAdvisories

Product · dromara

domain-admin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-121552

    domain-admin before 1.6.79 Missing Authorization via getGroupUserList

    Dromara domain-admin before 1.6.79 contains a missing authorization vulnerability in the POST /api/getGroupUserList handler that allows authenticated users to read other groups' members. Attackers can enumerate sequential group_id values to disclose member us…

    dromara domain-admin