Description

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

Remediation

References

https://github.com/dromara/Sa-Token/issues/511

Related Vulnerabilities

CVE-2022-27263 Vulnerability in npm package strapi

CVE-2023-50102 Vulnerability in maven package com.jfinal:jfinal

CVE-2020-7743 Vulnerability in maven package org.webjars.npm:mathjs

CVE-2022-24823 Vulnerability in maven package io.netty:netty-common

CVE-2017-16213 Vulnerability in npm package mfrserver

Severity

Critical

Classification

CWE-863 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking