Known Vulnerabilities
CVE-2023-43961
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
UNKNOWN
CVSS 8.8
Published Oct 25, 2023
CVE-2023-44794
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
UNKNOWN
Published Oct 25, 2023