CVE-2021-28411

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

Information disclosure

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges...

PT-2023-12126 · Lerry903 · Ruoyi

Name of the Vulnerable Software and Affected Versions: lerry903 RuoYi version 3.4.0 Description: An issue was discovered in the getRememberedSerializedIdentity function in the CookieRememberMeManager class, allowing remote attackers to escalate privileges. Recommendations: For version 3.4.0,...