Information disclosure

2023-08-1114:15:00

PRIOn knowledge base

www.prio-n.com

cookieremembermemanager

privilege escalation

remote attackers

lerry903 ruoyi version 3.4.0

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.9%

JSON

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges.

CPENameOperatorVersion
ruoyieq3.4.0

CPE	Name	Operator	Version
	ruoyi	eq	3.4.0

References

github.com/lerry903/RuoYi/issues/20