RuoYi vulnerable to SQL injection vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-49371 · ADVISORY
• gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847 · WEB
• Maverickfir/RuoYi-v4.6-vulnerability · WEB

More vulnerabilities in com.ruoyi:ruoyi

• CVE-2024-57439MEDIUM 4.9An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplic…
• CVE-2024-57438MEDIUM 5.4Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.
• CVE-2024-57436HIGH 7.2RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can all…
• CVE-2023-3815MEDIUM 6.1A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function …
• CVE-2023-3163HIGH 7.5A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The…