| Package | Affected versions | Patched versions |
|---|---|---|
| ruoyi | = 4.8.0 |
An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to add a menu item under the specified parentId
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free