Skip to content
OpenAdvisories

Vendor

dromara

62 known vulnerabilities.

Products

lamp-cloud 14 UJCMS 7 hertzbeat 6 RuoYi-Vue-Plus 6 Jpom 5 MaxKey 4 skyeye 4 mayfly-go 2 orion-visor 2 J2eeFAST 2 HuTool 2 Sa-Token 2 warm-flow 1 RuoYi-Cloud-Plus 1 dataCompare 1 open-capacity-platform 1 domain-admin 1 Northstar 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2024-12483 Public exploit

    Dromara UJCMS User ID id authorization

    A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack r…

    dromara UJCMS