CVE-2024-54762

The backend management system RuoYi (versions 4.7.9 and earlier ) is susceptible to an authenticated SQL injection vulnerability. The root cause is that the filterKeyword method fails to completely filter out SQL injection keywords. This flaw could allow an attacker with authentication to execute...