CVE-2025-46175

概要

参考情報

• gist.github.com/Han-tj/74d2ed84ede1909da55090fed410d288 · Third Party Advisory
• gitee.com/y_project/RuoYi/commit/f935b2782f4237cdbcc13bdce76703e82c42f4fe · Permissions Required
• gitee.com/y_project/RuoYi/issues/IC1FS0 · Issue Tracking

ruoyi のその他の脆弱性

• CVE-2025-70986高 7.5Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department…
• CVE-2025-70985緊急 9.1Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their sc…
• CVE-2024-57521緊急 10.0SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in S…
• CVE-2025-14856高 8.8A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/…
• CVE-2025-67342中 4.6RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint. While the endpoint is protecte…