critical9.8
CVE-2023-49371
RuoYi vulnerable to SQL injection vulnerability
Impact
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.ruoyi:ruoyi | <= 4.6 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruoyi | Ruoyi | through 4.6.0 |