Description
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.
Remediation
References
https://github.com/dromara/Sa-Token/issues/515
Related Vulnerabilities
CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils
CVE-2017-1000228 Vulnerability in npm package ejs
CVE-2019-15952 Vulnerability in npm package total.js
CVE-2023-49798 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2022-45207 Vulnerability in maven package org.jeecgframework.boot:jeecg-module-system