Description
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
Remediation
References
https://github.com/dromara/Sa-Token/issues/515
Related Vulnerabilities
CVE-2019-14653 Vulnerability in maven package org.webjars.npm:editor.md
CVE-2016-4437 Vulnerability in maven package org.apache.shiro:shiro-core
CVE-2019-15903 Vulnerability in npm package dbus
CVE-2023-28709 Vulnerability in maven package org.apache.tomcat:tomcat-util
CVE-2013-3300 Vulnerability in maven package net.liftweb:lift-json_2.9.1