critical9.8
CVE-2024-46076
RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code.
Impact
RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruoyi | Ruoyi | through 4.7.9 |