Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-796g-c5p5-hfrr

Опубликовано: 07 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges

EPSS

Процентиль: 76%
0.00975
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
nvd
10 месяцев назад

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges

EPSS

Процентиль: 76%
0.00975
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284