Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-43961
8.8
HIGHCVSS v3
Published
October 25, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
dromara/Sa-Token
GitHub✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名
GitHub✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名< 1.36.0NVD