yangzongzhuan RuoYi Image Source ui layer

yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting

Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account

yangzongzhuan RuoYi Quartz Job job code injection

RuoYi v4.7.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/notice/

RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint

yangzongzhuan RuoYi cross-site request forgery

yangzongzhuan RuoYi Druid application-druid.yml default credentials

y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting

y_project RuoYi Offline Logout batchForceLogout improper authorization