| عنوان | RuoYi RuoYi Management System 4.8.2 Code Injection |
|---|
| الوصف | A vulnerability was found in RuoYi Management System up to v4.8.2. It has been rated as critical. Affected by this issue is the Quartz Job Handler component. The manipulation of the argument invokeTarget leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public. |
|---|
| المصدر | ⚠️ https://github.com/M0onc/RuoYi-Quartz-RCE |
|---|
| المستخدم | Caishibo_ (UID 74890) |
|---|
| ارسال | 08/03/2026 11:33 AM (7 أشهر منذ) |
|---|
| الاعتدال | 22/03/2026 09:23 AM (14 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 352401 [yangzongzhuan RuoYi حتى 4.8.2 Quartz Job /monitor/job/ invokeTarget تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|