y_project RuoYi ଯେପର୍ଯ୍ୟନ୍ତ 4.7.7 filterKeyword ମୂଲ୍ୟ ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ

Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame y_project RuoYi ଯେପର୍ଯ୍ୟନ୍ତ 4.7.7 keessatti argameera. Kan miidhamte is hojii filterKeyword. Hojii jijjiirraa irratti gaggeeffame ମୂଲ୍ୟ gara ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-400 geessa. Dadhabbii kana yeroo 06/08/2023 maxxanfameera akka I78DOR. Odeeffannoon kun buufachuuf gitee.com irratti qoodameera. Dogoggorri kun akka CVE-2023-3163tti beekama. Konkolaataa naannoo keessa seenuu barbaachisa ta'ee, weerarri kun milkaa'uuf. Faayidaaleen teeknikaa ni jiru. Meeshaa balaa kana fayyadamuuf hin jiru. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ଅପରିଭାଷିତ jedhamee ibsameera. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. VulDB is the best source for vulnerability data and more expert information about this specific topic.

3 ଆଡାପ୍ଟେସନ୍ · 70 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
06/08/2023 03:00 PM		ଅଦ୍ୟତନ 1/2
07/07/2023 10:02 AM		ଅଦ୍ୟତନ 2/2
07/07/2023 10:03 AM
software_vendory_projecty_projecty_project
software_nameRuoYiRuoYiRuoYi
software_version<=4.7.7<=4.7.7<=4.7.7
software_functionfilterKeywordfilterKeywordfilterKeyword
software_argumentvaluevaluevalue
vulnerability_cweCWE-400 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)CWE-400 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)CWE-400 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)
vulnerability_risk111
cvss3_vuldb_acLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iNNN
cvss3_vuldb_aLLL
cvss3_vuldb_rcRRR
advisory_identifierI78DORI78DORI78DOR
advisory_urlhttps://gitee.com/y_project/RuoYi/issues/I78DORhttps://gitee.com/y_project/RuoYi/issues/I78DORhttps://gitee.com/y_project/RuoYi/issues/I78DOR
source_cveCVE-2023-3163CVE-2023-3163CVE-2023-3163
cna_responsibleVulDBVulDBVulDB
advisory_date1686175200 (06/08/2023)1686175200 (06/08/2023)1686175200 (06/08/2023)
software_typeProject Management SoftwareProject Management SoftwareProject Management Software
cvss2_vuldb_acLLL
cvss2_vuldb_ciNNN
cvss2_vuldb_iiNNN
cvss2_vuldb_aiPPP
cvss2_vuldb_rcURURUR
cvss2_vuldb_avAAA
cvss2_vuldb_auSSS
cvss2_vuldb_eNDNDND
cvss2_vuldb_rlNDNDND
cvss3_vuldb_avAAA
cvss3_vuldb_prLLL
cvss3_vuldb_eXXX
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore2.72.72.7
cvss2_vuldb_tempscore2.62.62.6
cvss3_vuldb_basescore3.53.53.5
cvss3_vuldb_tempscore3.43.43.4
cvss3_meta_basescore3.53.54.8
cvss3_meta_tempscore3.43.44.8
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1686175200 (06/08/2023)1686175200 (06/08/2023)
cve_nvd_summaryA vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability.A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cN
cvss3_nvd_iN
cvss3_nvd_aH
cvss2_nvd_avA
cvss2_nvd_acL
cvss2_nvd_auS
cvss2_nvd_ciN
cvss2_nvd_iiN
cvss2_nvd_aiP
cvss3_cna_avA
cvss3_cna_acL
cvss3_cna_prL
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cN
cvss3_cna_iN
cvss3_cna_aL
cve_cnaVulDB
cvss2_nvd_basescore2.7
cvss3_nvd_basescore7.5
cvss3_cna_basescore3.5

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Do you need the next level of professionalism?

Upgrade your account now!