RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-57436 · ADVISORY
• gitee.com/y_project/RuoYi · PACKAGE
• peccc/restful_vul · WEB
• yangzongzhuan/RuoYi · WEB
• ruoyi.vip · WEB
• ruoyi.vip · Product

com.ruoyi:ruoyi のその他の脆弱性

• CVE-2024-57439中 4.9An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplic…
• CVE-2024-57438中 5.4Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.
• CVE-2023-49371緊急 9.8RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
• CVE-2023-3815中 6.1A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function …
• CVE-2023-3163高 7.5A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The…