CVE-2024-6511 y_project RuoYi Content-Type isJsonRequest cross site scripting

A vulnerability classified as problematic was found in yproject RuoYi up to 4.7.9. Affected by this vulnerability is the function isJsonRequest of the component Content-Type Handler. The manipulation of the argument HttpHeaders.CONTENTTYPE leads to cross site scripting. The attack can be launched...

CVE-2024-6511

CVE-2024-6511 affects y_project RuoYi up to 4.7.9. The isJsonRequest function in the Content-Type Handler is vulnerable to cross-site scripting via manipulation of HttpHeaders.CONTENT_TYPE. The vulnerability is exploitable remotely; public exploit is disclosed. Impact in the sources is described ...

PT-2024-37680 · Unknown · Y Project Ruoyi

Name of the Vulnerable Software and Affected Versions: y project RuoYi versions up to 4.7.9 Description: A vulnerability was found in the function isJsonRequest of the component Content-Type Handler. The manipulation of the argument HttpHeaders.CONTENT TYPE leads to cross site scripting. The atta...

RuoYi Cross-Site Scripting Vulnerability

RuoYi is a backend management system by the individual developer RuoYi in China. A cross-site scripting vulnerability exists in RuoYi 4.7.9 and earlier versions, which stems from a parameter manipulation that can lead to cross-site scripting attacks...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi China. A security vulnerability exists in RuoYi v4.5.1. An attacker exploited the vulnerability to obtain sensitive information via the status parameter...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

CVE-2024-29400

CVE-2024-29400 affects RuoYi v4.5.1. The vulnerability allows attackers to obtain sensitive information via the status parameter. Public documents (NVD, Red Hat, CNVD, etc.) confirm the affected software and impact description but do not provide root-cause specifics or a guaranteed fix. No exploi...

PT-2024-22881 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi version 4.5.1 Description: An issue was discovered that allows attackers to obtain sensitive information via the status parameter. Recommendations: For RuoYi version 4.5.1, consider restricting access to the status parameter to minimize...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

SelectCours Security Breach

SelectCours is AbuCoder open source a secondary school based on Ruoyi rapid development framework for course selection system . SelectCours 1.0 version of a security vulnerability , the vulnerability stems from the component Template Handler file CacheController.java function getCacheNames there...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

Cross site scripting

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...

CVE-2023-52048

RuoYi v4.7.8 contains a cross-site scripting (XSS) vulnerability in the /system/notice/ component (CVE-2023-52048). The CVSS 3.1 base score is 4.7 (Medium) with network access, requiring user interaction; no public exploit details are provided in the documents. Remediation/fix status is not expli...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.8, which originates from a cross-site scripting XSS vulnerability found in the component /system/notice/...

PT-2024-14377 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RuoYi version 4.7.8 Description: A cross-site scripting XSS issue was found in the /system/notice/ component. This could potentially allow attackers to execute malicious scripts on the affected system. Recommendations: For RuoYi version 4.7.8...

CVE-2023-52048

RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...