Vulnerabilidades en dromara
62 resultadosCVE-2026-77795MEDIUMDromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorizationEPSS 0.3%CVE-2025-2491MEDIUMDromara ujcms Edit Template File Page WebFileTemplateController.java update cross site scriptingEPSS 0.3%CVE-2026-107781CRITICALDromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileByIdEPSS 0.3%CVE-2026-94536MEDIUMlamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resourceEPSS 0.3%CVE-2026-91993MEDIUMJpom through 2.11.12 Workspace Isolation Bypass via /build/branch-listEPSS 0.3%CVE-2026-110107LOWRuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}EPSS 0.3%CVE-2026-110106LOWRuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}EPSS 0.3%CVE-2025-7552MEDIUMDromara Northstar Path AuthorizationInterceptor.java preHandle access controlEPSS 0.3%CVE-2025-2490MEDIUMDromara ujcms File Upload WebFileUploadController.java upload cross site scriptingEPSS 0.3%CVE-2025-15117LOWDromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserializationEPSS 0.3%CVE-2026-58176HIGHRuoYi-Vue-Plus - Missing Authorization on Workflow Task Management EndpointsEPSS 0.3%CVE-2026-111605HIGHJpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileControllerEPSS 0.3%CVE-2026-119647MEDIUMRuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}EPSS 0.3%CVE-2026-6125MEDIUMDromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injectionEPSS 0.3%CVE-2026-9498MEDIUMDromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engineEPSS 0.3%CVE-2025-13268MEDIUMDromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injectionEPSS 0.3%CVE-2026-2819MEDIUMDromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorizationEPSS 0.3%CVE-2026-5529MEDIUMDromara lamp-cloud DefUserController pageUser improper authorizationEPSS 0.3%CVE-2025-15222LOWDromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserializationEPSS 0.3%CVE-2026-109166HIGHlamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlByIdEPSS 0.2%