EUVD-2025-0194

Malicious code in bioql PyPI...

CVE-2024-57436

RuoYi v4.8.0 contains an exposure in the system monitoring session handling where an unauthenticated user could view the admin session ID via a crafted cookie, enabling admin impersonation. The issue is documented across multiple sources (CVE-2024-57436) and is classified with high impact (confid...