Information disclosure

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

PT-2023-12126 · Lerry903 · Ruoyi

Name of the Vulnerable Software and Affected Versions: lerry903 RuoYi version 3.4.0 Description: An issue was discovered in the getRememberedSerializedIdentity function in the CookieRememberMeManager class, allowing remote attackers to escalate privileges. Recommendations: For version 3.4.0,...

RuoYi Security Breach

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. lerry903 A security vulnerability exists in RuoYi version 3.4.0, which originates from allowing an attacker to perform elevation of privilege via the getRememberedSerializedIdentity function...

CVE-2021-28411

CVE-2021-28411 affects lerry903 RuoYi 3.4.0. Root cause: an issue in getRememberedSerializedIdentity in CookieRememberMeManager allows remote attackers to escalate privileges. Documents consistently describe privilege elevation risk but do not provide patch details. PT-2023-12126 suggests disabli...

GHSA-P4WW-J4PR-QW6Q RuoYi vulnerable to Cross-site Scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

RuoYi vulnerable to Cross-site Scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

CVE-2023-3815

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

CVE-2023-3815

CVE-2023-3815 affects y_project RuoYi (up to 4.7.7). The vulnerability is in the File Upload component, specifically the function uploadFilesPath where manipulation of the originalFilenames argument leads to cross-site scripting. The issue can be exploited remotely and does not require authentica...

CVE-2023-3815 y_project RuoYi File Upload uploadFilesPath cross site scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

CVE-2023-3815 y_project RuoYi File Upload uploadFilesPath cross site scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

CVE-2023-3815 y_project RuoYi File Upload uploadFilesPath cross site scripting

A vulnerability, which was classified as problematic, has been found in yproject RuoYi up to 4.7.7. Affected by this issue is the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be launched...

RuoYi 跨站脚本漏洞

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A cross-site scripting vulnerability exists in RuoYi versions prior to 4.7.7. The vulnerability stems from a security issue in the uploadFilesPath function of the File Upload component, which leads to cross-site...

PT-2023-26321 · Unknown · Y Project Ruoyi

Name of the Vulnerable Software and Affected Versions: y project RuoYi versions up to 4.7.7 Description: A vulnerability has been found in the function uploadFilesPath of the component File Upload. The manipulation of the argument originalFilenames leads to cross site scripting. The attack may be...

Exploit for Uncontrolled Resource Consumption in Ruoyi

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way...

GHSA-G3HH-Q55F-9G3W RuoYi Uncontrolled Resource Consumption vulnerability

A vulnerability was found in yproject RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability...

RuoYi Uncontrolled Resource Consumption vulnerability

A vulnerability was found in yproject RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability...

CVE-2023-3163

A vulnerability was found in yproject RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability...

Design/Logic Flaw

A vulnerability was found in yproject RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability...

CVE-2023-3163

CVE-2023-3163 affects y_project RuoYi up to version 4.7.7. The vulnerability resides in the filterKeyword function where manipulation of the argument value leads to uncontrolled resource consumption (DoS). Multiple connected sources (including Red Hat, OSV, NVD, and CVE lists) confirm the same im...