exploitDog

GHSA-cj4v-qxg2-mjcc

Опубликовано: 15 сент. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components

An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components

Ссылки

EPSS

Процентиль: 48%

0.0062

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-863

Связанные уязвимости

CVE-2026-88616

CVSS3: 8.8

nvd

8 дней назад

An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components

EPSS

Процентиль: 48%

0.0062

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-863