Submeter #618362: RuoYi https://github.com/yangzongzhuan/RuoYi <=v4.8.1 Druid credentials hardcodedinformação

TítuloRuoYi https://github.com/yangzongzhuan/RuoYi <=v4.8.1 Druid credentials hardcoded
DescriçãoDruid credential is hardcoded, when user uses the default credential or it is leaked, which can lead to allow attacker gather sensitive IT operation information.
Fonte⚠️ https://github.com/yangzongzhuan/RuoYi/issues/297
Utilizador
 ZAST.AI (UID 87884)
Submissão18/07/2025 11h33 (há 11 meses)
Moderação19/07/2025 20h39 (1 day later)
EstadoAceite
Entrada VulDB317022 [yangzongzhuan RuoYi até 4.8.1 Druid application-druid.yml Divulgação de Informação]
Pontos15

Do you know our Splunk app?

Download it now for free!