CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
4.0	$0-$5k	0.00

Gundumabayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a y_project RuoYi har 4.7.9. Tabbas, aikin SysUserServiceImpl ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java, a cikin sashi Backend User Import. Wuro manipulation of the argument loginName ga Cross Site Scripting. Ana kiran wannan rauni da CVE-2024-9048. Ngam yiɗi ka a tuma ndiyam ka internet. Kuma, akwai exploit. Ya kamata a yi amfani da patch don magance wannan matsala. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Furɗebayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a y_project RuoYi har 4.7.9. Tabbas, aikin SysUserServiceImpl ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java, a cikin sashi Backend User Import. Wuro manipulation of the argument loginName ga Cross Site Scripting. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-79. Lalle, rauni an sanar da shi da IAR6Q3. Ana samun bayanin tsaro don saukewa a gitee.com.

Ana kiran wannan rauni da CVE-2024-9048. Ngam yiɗi ka a tuma ndiyam ka internet. Bayani na fasaha ga. Wahalhalun kai hari sun yi yawa. Wanda zai yi amfani da shi zai sha wahala. Wannan vulnerability ɗin ba a san shi sosai ba. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro.

Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a gitee.com.

Patch ɗin an san shi da 9b68013b2af87b9c809c4637299abd929bc73510. Bugfix ɗin an shirya shi don saukewa a gitee.com. Ya kamata a yi amfani da patch don magance wannan matsala.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Kayanbayani

Nganji

• Project Management Software

Ngilabe

• y_project

Sunu

• RuoYi

Furɗe

• 4.7.0
• 4.7.1
• 4.7.2
• 4.7.3
• 4.7.4
• 4.7.5
• 4.7.6
• 4.7.7
• 4.7.8
• 4.7.9

Webseite

• Kayan: https://gitee.com/y_project/RuoYi/

CPE 2.3bayani

• 🔍
• 🔍
• 🔍

CPE 2.2bayani

• 🔍
• 🔍
• 🔍

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 4.1
VulDB Meta Temp Score: 4.0

VulDB Ganda Borno: 3.1
VulDB Temp Score: 2.8
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

NVD Ganda Borno: 6.1
NVD Furɗo: 🔍

CNA Ganda Borno: 3.1
CNA Furɗo: 🔍

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Cross Site Scripting
CWE: CWE-79 / CWE-94 / CWE-74
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔍
Gada: Kàndíga
Halitta: Huɗɗi-na-gaskiya
Dawunload: 🔍

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍

0-Day	furu	furu	furu	furu
Lale	furu	furu	furu	furu

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Kari
Halitta: 🔍

0-Day Gana: 🔍

Kari: 9b68013b2af87b9c809c4637299abd929bc73510

Waktin layibayani

09/20/2024 🔍
09/20/2024 +0 Hənde 🔍
03/09/2025 +170 Hənde 🔍

Ngizimbayani

Kayan: gitee.com

Gargaaji: IAR6Q3
Halitta: Gaskiya
Tafsirga: 🔍

CVE: CVE-2024-9048 (🔍)
GCVE (CVE): GCVE-0-2024-9048
GCVE (VulDB): GCVE-100-278215
scip Labs: https://www.scip.ch/en/?labs.20161013

Gumtibayani

Súgá: 09/20/2024 17:40
Gargadi: 03/09/2025 18:26
Goyarwa: 09/20/2024 17:40 (63), 09/21/2024 17:05 (18), 09/27/2024 05:58 (1), 09/30/2024 15:32 (14), 03/09/2025 18:26 (3)
Gadankam: 🔍
Cache ID: 253:583:103

Ganaaji

Might our Artificial Intelligence support you?

Check our Alexa App!