~ / search / GHSA-fg29-37px-c7wm

GHSA-fg29-37px-c7wm

RuoYi vulnerable to SQL injection vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-49371

Packages

EcosystemPackageAffectedFixed in
Maven com.ruoyi:ruoyi <= 4.6 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.

References

External links from the advisory. They lead to third-party sites.