RuoYi vulnerable to Denial of Service by attackers with admin privileges

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-57439 · ADVISORY
• gitee.com/y_project/RuoYi · PACKAGE
• peccc/restful_vul · WEB
• yangzongzhuan/RuoYi · WEB
• ruoyi.vip · WEB
• ruoyi.vip · Product

com.ruoyi:ruoyi のその他の脆弱性

• CVE-2024-57438中 5.4Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.
• CVE-2024-57436高 7.2RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can all…
• CVE-2023-49371緊急 9.8RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
• CVE-2023-3815中 6.1A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function …
• CVE-2023-3163高 7.5A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The…