What is GHSA-54f6-9mx9-86f7?

GHSA-54f6-9mx9-86f7 is a security advisory published by GitHub Security Advisories with Critical severity. SaToken privilege escalation vulnerability

Which CVE IDs does GHSA-54f6-9mx9-86f7 cover?

GHSA-54f6-9mx9-86f7 covers the following CVE IDs: CVE-2023-44794. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-54f6-9mx9-86f7?

GHSA-54f6-9mx9-86f7 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-54f6-9mx9-86f7?

GHSA-54f6-9mx9-86f7 affects 1 product, including: maven/cn.dev33:sa-token-core:\u003c 1.37.0.

GHSA-54f6-9mx9-86f7CriticalCVSS 9.8

SaToken privilege escalation vulnerability

Vendor

GitHub Security Advisories

Published

October 25, 2023

Last Modified

September 12, 2024

🔗 CVE IDs covered (1)

CVE-2023-44794 →

📋 Description

An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL.

🎯 Affected products1

maven/cn.dev33:sa-token-core:< 1.37.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-44794
https://github.com/dromara/Sa-Token/issues/515
https://github.com/dromara/Sa-Token/commit/954efeb73277f924f836da2a25322ea35ee1bfa3
https://github.com/advisories/GHSA-54f6-9mx9-86f7