Executive brief
RuoYi has insecure permissions
Affected products
- Maven com.ruoyi:ruoyi
Junglewise Threat Intelligence
CVE-2024-57438: RuoYi has insecure permissions
CVE-2024-57438 · Severity: medium · CVSS 4 · Published 2025-01-29
Technologies: com.ruoyi:ruoyi (Maven). Vendors: Maven.
Related threats
- RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
- RuoYi vulnerable to Denial of Service by attackers with admin privileges
- RuoYi vulnerable to SQL injection vulnerability
- RuoYi vulnerable to Cross-site Scripting
- RuoYi Uncontrolled Resource Consumption vulnerability