764 matches found
RuoYi 安全漏洞
RuoYi is a backend management system by the individual developer RuoYi in China. A security vulnerability exists in RuoYi, which stems from some unknown functions in its JSON Handler component that allow an attacker to implement cross-site scripting. The attack method has been made public and can...
CVE-2022-4348 y_project RuoYi-Cloud JSON cross site scripting
A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...
PT-2022-26934 · Y · Ruoyi-Cloud
Name of the Vulnerable Software and Affected Versions: y project RuoYi-Cloud affected versions not specified Description: A vulnerability was found in the JSON Handler component of y project RuoYi-Cloud, which can be exploited to lead to cross site scripting. The attack may be launched remotely...
CVE-2022-4348
CVE-2022-4348 affects y_project RuoYi-Cloud, specifically the JSON Handler component, where input handling allows cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. Multiple sources corroborate the issue, including Red Hat, GitHub advis...
CVE-2022-4348 y_project RuoYi-Cloud JSON cross site scripting
A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
Summary: CVE-2022-37158 affects RuoYi v3.8.3, reporting a weak password vulnerability in the management system. The issue has a high impact (CVSS 9.8: Network attack, no user interaction, all of confidentiality, integrity, and availability affected) and is attributable to a weak password policy i...
RuoYi 安全漏洞
RuoYi is a back-end management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v3.8.3, which stems from a weak password vulnerability in the management system...
PT-2022-23845 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi version 3.8.3 Description: The issue is related to a weak password in the management system. Recommendations: For RuoYi version 3.8.3, update the password to a stronger one to mitigate the risk...
GHSA-6W2F-6WQ3-RJVF RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
CVE-2022-32065 concerns RuoYi v4.7.3 and earlier where an arbitrary file upload in the background management module enables attackers to execute arbitrary code via a crafted HTML file. Affected product/component: RuoYi, background management module; root cause: improper handling/upload of HTML co...