إرسال #545866: ageerle https://github.com/ageerle/ruoyi-ai 20250328 version Unauthorized access vulnerabilityالمعلومات

عنوانageerle https://github.com/ageerle/ruoyi-ai 20250328 version Unauthorized access vulnerability
الوصفThe SysNoticeController component of the open source full-stack AI development platform project "https://github.com/ageerle/ruoyi-ai" has an unauthorized access vulnerability. Attackers can modify and query the notification information sent to users by this management system without any access credentials.
المصدر⚠️ https://github.com/Tr0e/CVE_Hunter/blob/main/ruoyi-ai/ruoyi-ai_UnauthorizedAccess_02.md
المستخدم
 Anonymous User
ارسال29/03/2025 06:46 AM (2 سنوات منذ)
الاعتدال03/04/2025 02:54 PM (5 days later)
الحالةتمت الموافقة
إدخال VulDB303156 [ageerle ruoyi-ai حتى 2.0.0 SysNoticeController.java تجاوز الصلاحيات]
النقاط17

Do you need the next level of professionalism?

Upgrade your account now!