Dromara Sa-token — known CVE vulnerabilities

Every CVE whose affected-product data names Dromara Sa-token, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-44794 — CVSS 9.8 (critical): An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
• CVE-2023-43961 — CVSS 8.8 (high): An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an…