CVE-2025-15222: Deserialization in Dromara Sa-Token
A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerializerTemplateForJdkUseBase64.java. Such manipulation leads to deserialization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-15222: Deserialization in Dromara Sa-Token
Description
A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerializerTemplateForJdkUseBase64.java. Such manipulation leads to deserialization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-12-28T16:00:29.649Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6953671971a94549f1a7ee55
Added to database: 12/30/2025, 5:46:01 AM
Last updated: 12/30/2025, 8:37:53 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Related Threats
CVE-2023-36377: n/a
UnknownCVE-2025-15233: Heap-based Buffer Overflow in Tenda M3
HighCVE-2025-15355: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in NetVision Information ISOinsight
MediumCVE-2025-15232: Stack-based Buffer Overflow in Tenda M3
HighCVE-2025-15231: Stack-based Buffer Overflow in Tenda M3
HighActions
Need more coverage?
Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.