CVE-2024-57521

Mô tả

Tham khảo

• gitee.com/y_project/RuoYi/commit/ddd858ca732618a472b10eaab2f8e4b45812ffc5 · Patch
• gitee.com/y_project/RuoYi/issues/IBC976 · Issue Tracking
• mrlihd/CVE-2024-57521-SQL-Injection-PoC · Exploit
• mrlihd/Ruoyi-4.7.9-SQL-Injection-PoC · Exploit

Lỗ hổng khác của ruoyi

• CVE-2025-70986CAO 7.5Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department…
• CVE-2025-70985NGHIÊM TRỌNG 9.1Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their sc…
• CVE-2025-14856CAO 8.8A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/…
• CVE-2025-67342TRUNG BÌNH 4.6RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint. While the endpoint is protecte…
• CVE-2025-46175CAO 7.5Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the authRole method of Sys…