CVE-2024-6511: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in yproject RuoYi up to 4.7.9. Affected by this vulnerability is the function isJsonRequest of the component Content-Type Handler. The manipulation of the argument HttpHeaders.CONTENTTYPE leads to cross site scripting. The attack can be launched...