8 matches found
CVE-2026-108825
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has bee...
EUVD-2026-97324
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has bee...
CVE-2026-108825 yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has bee...
CVE-2026-108825
The yangzongzhuan RuoYi framework, up to version 4.8.3 , is vulnerable to improper privilege management. The flaw exists in the checkRoleAllowed function within the /system/role/authDataScope file, where manipulating the roleKey argument allows for unauthorized access. This vulnerability is remot...
CVE-2026-108825: Improper Privilege Management
A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is possible to launch the attack remotely. The exploit has bee...
PT-2026-110536
Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions prior to 4.8.4 Description Improper privilege management occurs due to the manipulation of the roleKey argument within the checkRoleAllowed function located in the /system/role/authDataScope file. This issue allows...
CVE-2026-100879 zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...
EUVD-2026-88034
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...