RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
References
Link | Resource |
---|---|
https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847 | Third Party Advisory |
https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md | Exploit |
https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847 | Third Party Advisory |
https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md | Exploit |
Configurations
History
21 Nov 2024, 08:33
Type | Values Removed | Values Added |
---|---|---|
References | () https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847 - Third Party Advisory | |
References | () https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md - Exploit |
06 Dec 2023, 18:58
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:* | |
CWE | CWE-89 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
References | () https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md - Exploit | |
References | () https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847 - Third Party Advisory |
06 Dec 2023, 13:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
01 Dec 2023, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-01 15:15
Updated : 2024-11-21 08:33
NVD link : CVE-2023-49371
Mitre link : CVE-2023-49371
CVE.ORG link : CVE-2023-49371
JSON object : View
Products Affected
ruoyi
- ruoyi
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')