Y Project vulnerabilities

Products

• Ruoyi 11

Newest

• y project ruoyi y_project RuoYi Disable API add changeStatus session expiration CVE-2026-108803 5.3 MediumOctober 12, 2026
• y project ruoyi y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting CVE-2026-108802 5.1 MediumOctober 12, 2026
• ruoyi y_project RuoYi getnames code injection CVE-2025-14856 5.3 MediumDecember 18, 2025
• ruoyi y_project RuoYi Offline Logout batchForceLogout improper authorization CVE-2025-4819 2.3 LowMay 17, 2025
• ruoyi y_project RuoYi Whitelist getBeanName deserialization CVE-2025-0734 5.1 MediumJanuary 27, 2025
• ruoyi y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting CVE-2024-9048 6.3 MediumSeptember 21, 2024
• ruoyi y_project RuoYi Content-Type isJsonRequest cross site scripting CVE-2024-6511 5.3 MediumJuly 4, 2024
• ruoyi y_project RuoYi HTTP POST Request login cross site scripting CVE-2023-7133 4.3 MediumDecember 28, 2023
• ruoyi y_project RuoYi File Upload uploadFilesPath cross site scripting CVE-2023-3815 3.5 LowJuly 21, 2023
• ruoyi y_project RuoYi filterKeyword resource consumption CVE-2023-3163 Public exploit 3.5 LowJune 8, 2023
• ruoyi y_project RuoYi GenController sql injection CVE-2022-4566 5.5 MediumDecember 16, 2022
• ruoyi ruoyi-cloud y_project RuoYi-Cloud JSON cross site scripting CVE-2022-4348 3.5 LowDecember 8, 2022