Описание
An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.
Ссылки
- Third Party Advisory
- ExploitIssue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ruoyi:ruoyi:4.8.1:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00057
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284
Связанные уязвимости
CVSS3: 8.8
github
2 месяца назад
An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.
EPSS
Процентиль: 18%
0.00057
Низкий
8.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-284