Description
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
Remediation
References
https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847
https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md
Related Vulnerabilities
CVE-2021-3794 Vulnerability in npm package @vuelidate/validators
CVE-2019-10305 Vulnerability in maven package com.xebialabs.xl-deploy:jenkins-dependendencies
CVE-2019-10805 Vulnerability in npm package valib
CVE-2019-12041 Vulnerability in maven package org.webjars.npm:remarkable
CVE-2020-28426 Vulnerability in npm package kill-process-on-port