Description
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
Remediation
References
https://github.com/dromara/Sa-Token/issues/511
Related Vulnerabilities
CVE-2020-7656 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2022-25869 Vulnerability in maven package org.webjars.npm:angular
CVE-2023-49448 Vulnerability in maven package com.jfinal:jfinal
CVE-2017-16018 Vulnerability in npm package restify
CVE-2020-19697 Vulnerability in maven package org.webjars.bowergithub.pandao:editor.md