Description
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
Remediation
References
https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847
https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md
Related Vulnerabilities
CVE-2019-10760 Vulnerability in maven package org.webjars.npm:safer-eval
CVE-2020-9498 Vulnerability in maven package org.apache.guacamole:guacamole
CVE-2021-41183 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2020-7597 Vulnerability in npm package codecov
CVE-2022-23615 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore