Dromara Ruoyi-vue-plus vulnerabilities
- dromara ruoyi-vue-plusRuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}5.3 Medium
- dromara ruoyi-vue-plusRuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}2.3 Low
- dromara ruoyi-vue-plusDromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization5.3 Medium
- dromara ruoyi-vue-plusRuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints7.1 High
- dromara ruoyi-vue-plusDromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization5.3 Medium
- dromara ruoyi-vue-plusThe snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job...9.4 Critical
- dromara ruoyi-vue-plusDromara RuoYi-Vue-Plus Mail MailController.java path traversal6.9 Medium