Login Request a demo
RU
Product
RuoYi
by y_project · last CVE May 17, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 4Low 1
Severity
All severities8Critical1High2Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add RuoYi to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9048
6.1
0%
Sep 21
y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +4 more
CVE-2024-6511
6.1
0%
Jul 4
y_project RuoYi Content-Type isJsonRequest cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +4 more
CVE-2023-7133
6.1
1%
Dec 28
y_project RuoYi HTTP POST Request login cross site scripting
Affected: 4.7.8
CVE-2023-3815
6.1
1%
Jul 21
y_project RuoYi File Upload uploadFilesPath cross site scripting
Affected: 4.7.0; 4.7.1; 4.7.2; 4.7.3; 4.7.4; 4.7.5; +2 more
Showing 4