cve.bz

yangzongzhuan ruoyi vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 5.1CVE-2026-129247

    A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.3. Impacted is the function VelocityUtils.getFileName of the file VelocityUtils.java of the component Code Generator. Performing a manipulation of the argument className …

  2. 2.1CVE-2026-108825EPSS 0.2%

    A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argument roleKey leads to improper privilege management. It is p…

  3. 5.3CVE-2026-108800EPSS 0.2%

    A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The vendor was contacted early about this…

  4. 2.0CVE-2026-4564EPSS 0.3%

    A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads t…