Skip to contentY Project Ruoyi vulnerabilities
- y project ruoyiy_project RuoYi Disable API add changeStatus session expirationCVE-2026-1088035.3 Medium
- y project ruoyiy_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scriptingCVE-2026-1088025.1 Medium
- ruoyiy_project RuoYi getnames code injectionCVE-2025-148565.3 Medium
- ruoyiy_project RuoYi Offline Logout batchForceLogout improper authorizationCVE-2025-48192.3 Low
- ruoyiy_project RuoYi Whitelist getBeanName deserializationCVE-2025-07345.1 Medium
- ruoyiy_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scriptingCVE-2024-90486.3 Medium
- ruoyiy_project RuoYi Content-Type isJsonRequest cross site scriptingCVE-2024-65115.3 Medium
- ruoyiy_project RuoYi HTTP POST Request login cross site scriptingCVE-2023-71334.3 Medium
- ruoyiy_project RuoYi File Upload uploadFilesPath cross site scriptingCVE-2023-38153.5 Low
- ruoyiy_project RuoYi filterKeyword resource consumptionCVE-2023-3163Public exploit3.5 Low
- ruoyiy_project RuoYi GenController sql injectionCVE-2022-45665.5 Medium
- ruoyi ruoyi-cloudy_project RuoYi-Cloud JSON cross site scriptingCVE-2022-43483.5 Low