medium4.9
CVE-2024-57439
RuoYi vulnerable to Denial of Service by attackers with admin privileges
Impact
An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.ruoyi:ruoyi | <= 4.8.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruoyi | Ruoyi | Version 4.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://gitee.com/y_project/RuoYi
- https://github.com/peccc/restful_vul/blob/main/ruoyi_dos/ruoyi_dos.md
- https://github.com/yangzongzhuan/RuoYi
- https://ruoyi.vip/
- https://github.com/advisories/GHSA-qq5h-rjj9-q9qg
- https://nvd.nist.gov/vuln/detail/CVE-2024-57439
- https://ruoyi.vip