VULNERABILITY INTELLIGENCE

CVE-2023-43961

CVSS score8.8 HIGH

EPSS probability1.00%

CISA KEVNot currently listed

Published2023-10-25

Last modified2026-06-17

Description

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass.