Skip to content
OpenAdvisories

Product · dromara

MaxKey

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-7699

    Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection

    A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is po…

    dromara MaxKey
  • Medium 6.3
    CVE-2025-6517

    Dromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery

    A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component M…

    dromara MaxKey