Описание
An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components
EPSS
Процентиль: 48%
0.0062
Низкий
8.8 High
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 8.8
github
8 дней назад
An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components
EPSS
Процентиль: 48%
0.0062
Низкий
8.8 High
CVSS3
Дефекты
CWE-863