CVE-2024-46076

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*

History

15 May 2025, 09:32

Type Values Removed Values Added
First Time Ruoyi
Ruoyi ruoyi
References () https://github.com/yangzongzhuan/RuoYi - () https://github.com/yangzongzhuan/RuoYi - Product
References () https://gist.github.com/kkll5875/f237f200bae6db6b47eea3236d82ad0d - () https://gist.github.com/kkll5875/f237f200bae6db6b47eea3236d82ad0d - Third Party Advisory
CPE cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*

07 Oct 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-07 18:15

Updated : 2025-05-15 09:32


NVD link : CVE-2024-46076

Mitre link : CVE-2024-46076


JSON object : View

Products Affected

ruoyi

  • ruoyi
CWE

No CWE.