Login Request a demo
RU
Product
RuoYi
by y_project · last CVE May 17, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add RuoYi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-4566
9.8
1%
Dec 16
y_project RuoYi GenController sql injection
Affected: 4.7.5
CVE-2023-3163
7.5
1%
Jun 8
y_project RuoYi filterKeyword resource consumption
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +2 more
CVE-2025-0734
7.2
1%
Jan 27
y_project RuoYi Whitelist getBeanName deserialization
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +3 more
CVE-2024-9048
6.1
0%
Sep 21
y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +4 more
CVE-2024-6511
6.1
0%
Jul 4
y_project RuoYi Content-Type isJsonRequest cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +4 more
CVE-2023-7133
6.1
1%
Dec 28
y_project RuoYi HTTP POST Request login cross site scripting
Affected: 4.7.8
CVE-2023-3815
6.1
1%
Jul 21
y_project RuoYi File Upload uploadFilesPath cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +2 more
CVE-2025-4819
3.1
0%
May 17
y_project RuoYi Offline Logout batchForceLogout improper authorization
Affected: 4.8.0
Showing 8