dromara
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 25 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 15, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dromara UJCMS UserController UserController.java usernameExist improper authorization
Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization
Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine
Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection
Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection
Dromara lamp-cloud DefUserController pageUser improper authorization
Monitor dromara in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.