RuoYi Cross-Site Scripting Vulnerability

RuoYi is a backend management system by the individual developer RuoYi in China. A cross-site scripting vulnerability exists in RuoYi 4.7.9 and earlier versions, which stems from a parameter manipulation that can lead to cross-site scripting attacks...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

CVE-2024-29400

CVE-2024-29400 affects RuoYi v4.5.1. The vulnerability allows attackers to obtain sensitive information via the status parameter. Public documents (NVD, Red Hat, CNVD, etc.) confirm the affected software and impact description but do not provide root-cause specifics or a guaranteed fix. No exploi...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

PT-2024-22881 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi version 4.5.1 Description: An issue was discovered that allows attackers to obtain sensitive information via the status parameter. Recommendations: For RuoYi version 4.5.1, consider restricting access to the status parameter to minimize...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi China. A security vulnerability exists in RuoYi v4.5.1. An attacker exploited the vulnerability to obtain sensitive information via the status parameter...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

SelectCours Security Breach

SelectCours is AbuCoder open source a secondary school based on Ruoyi rapid development framework for course selection system . SelectCours 1.0 version of a security vulnerability , the vulnerability stems from the component Template Handler file CacheController.java function getCacheNames there...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

Cross site scripting

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.8, which originates from a cross-site scripting XSS vulnerability found in the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 contains a cross-site scripting (XSS) vulnerability in the /system/notice/ component (CVE-2023-52048). The CVSS 3.1 base score is 4.7 (Medium) with network access, requiring user interaction; no public exploit details are provided in the documents. Remediation/fix status is not expli...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

PT-2024-14377 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi version 4.7.8 Description: A cross-site scripting XSS issue was found in the /system/notice/ component. This could potentially allow attackers to execute malicious scripts on the affected system. Recommendations: For RuoYi version 4.7.8...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-7133

A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...

Cross site scripting

A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...