781 matches found
CVE-2022-4348 y_project RuoYi-Cloud JSON cross site scripting
A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...
CVE-2022-4348
CVE-2022-4348 affects y_project RuoYi-Cloud, specifically the JSON Handler component, where input handling allows cross-site scripting. The vulnerability can be exploited remotely, and the exploit has been disclosed publicly. Multiple sources corroborate the issue, including Red Hat, GitHub advis...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
RuoYi v3.8.3 has a Weak password vulnerability in the management system...
CVE-2022-37158
Summary: CVE-2022-37158 affects RuoYi v3.8.3, reporting a weak password vulnerability in the management system. The issue has a high impact (CVSS 9.8: Network attack, no user interaction, all of confidentiality, integrity, and availability affected) and is attributable to a weak password policy i...
PT-2022-23845 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi version 3.8.3 Description: The issue is related to a weak password in the management system. Recommendations: For RuoYi version 3.8.3, update the password to a stronger one to mitigate the risk...
RuoYi 安全漏洞
RuoYi is a back-end management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v3.8.3, which stems from a weak password vulnerability in the management system...
GHSA-6W2F-6WQ3-RJVF RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
CVE-2022-32065 concerns RuoYi v4.7.3 and earlier where an arbitrary file upload in the background management module enables attackers to execute arbitrary code via a crafted HTML file. Affected product/component: RuoYi, background management module; root cause: improper handling/upload of HTML co...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-32065
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
RuoYi 跨站脚本漏洞
RuoYi is a backend management system for individual developers of China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.3 and below, which stems from an arbitrary file upload vulnerability in the backend management module that allows an attacker to execute arbitrary code via a speciall...
CVE-2022-23869
In RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of user test3, but the password of user test3 can be reset through the /system/user/resetPwd request...