CVE-2024-57438

Description

Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.

Affected packages (1)

• Maven/com.ruoyi:ruoyifrom 0, <= 4.8.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-57438
• PATCHhttps://gitee.com/y_project/RuoYi
• WEBhttps://github.com/peccc/restful_vul/blob/main/ruoyi_insecure_role_assignments/ruoyi_insecure_role_assignments.md
• WEBhttps://github.com/yangzongzhuan/RuoYi
• WEBhttps://ruoyi.vip