dromara
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 30 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 15, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter
Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById
Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE
Dromara UJCMS UserController UserController.java usernameExist improper authorization
Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization
Monitor dromara in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.