y_project RuoYi ଯେପର୍ଯ୍ୟନ୍ତ 4.7.9 Backend User Import SysUserServiceImpl.java SysUserServiceImpl loginName କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ

Rakkoon nageenyaa kan ସମସ୍ୟାଜନକ jedhamuun beekamu y_project RuoYi ଯେପର୍ଯ୍ୟନ୍ତ 4.7.9 keessatti argameera. Miidhaan irra gahe is hojii SysUserServiceImpl faayilii ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java keessa kutaa Backend User Import keessa. Dhugumatti jijjiirraa irratti raawwatame loginName gara କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-79 si geessa. Beekumsi kun yeroo 09/20/2024 ifoomsifameera akka IAR6Q3. Odeeffannoon kun buufachuuf gitee.com irratti dhiyaateera. Dogoggorri kun maqaa CVE-2024-9048 jedhuun tajaajilama. Weerara fageenya irraa jalqabuun ni danda'ama. Odeeffannoon teeknikaa ni argama. Akka dabalataan, meeshaa balaa kana fayyadamuuf argama. Qorannoo miidhaa (exploit) beeksifamee jira, namoonni itti fayyadamuu danda'u. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee murtaa’eera. Exploit kana gitee.com irraa buufachuu ni dandeessa. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $0-$5k jedhamee tilmaamame. Maqa-balleessaa paachii 9b68013b2af87b9c809c4637299abd929bc73510 jedhama. Sirreeffamni rakkoo gitee.com irratti buufachuuf jira. Paachii fe'uun rakkoo kana furuuf ni gorfama. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

5 ଆଡାପ୍ଟେସନ୍ · 99 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
09/20/2024 05:40 PM		ଅଦ୍ୟତନ 1/4
09/21/2024 05:05 PM		ଅଦ୍ୟତନ 2/4
09/27/2024 05:58 AM		ଅଦ୍ୟତନ 3/4
09/30/2024 03:32 PM		ଅଦ୍ୟତନ 4/4
03/09/2025 06:26 PM
software_vendory_projecty_projecty_projecty_projecty_project
software_nameRuoYiRuoYiRuoYiRuoYiRuoYi
software_version<=4.7.9<=4.7.9<=4.7.9<=4.7.9<=4.7.9
software_componentBackend User ImportBackend User ImportBackend User ImportBackend User ImportBackend User Import
software_fileruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.javaruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.javaruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.javaruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.javaruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java
software_functionSysUserServiceImplSysUserServiceImplSysUserServiceImplSysUserServiceImplSysUserServiceImpl
software_argumentloginNameloginNameloginNameloginNameloginName
vulnerability_cweCWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)
vulnerability_risk11111
cvss3_vuldb_avNNNNN
cvss3_vuldb_acHHHHH
cvss3_vuldb_prNNNNN
cvss3_vuldb_uiRRRRR
cvss3_vuldb_sUUUUU
cvss3_vuldb_cNNNNN
cvss3_vuldb_iLLLLL
cvss3_vuldb_aNNNNN
cvss3_vuldb_ePPPPP
cvss3_vuldb_rlOOOOO
cvss3_vuldb_rcCCCCC
advisory_identifierIAR6Q3IAR6Q3IAR6Q3IAR6Q3IAR6Q3
advisory_urlhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3
advisory_confirm_urlhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_linkhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_linkhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_linkhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_linkhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_link
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3https://gitee.com/y_project/RuoYi/issues/IAR6Q3
countermeasure_nameପ୍ୟାଚ୍ପ୍ୟାଚ୍ପ୍ୟାଚ୍ପ୍ୟାଚ୍ପ୍ୟାଚ୍
patch_name9b68013b2af87b9c809c4637299abd929bc735109b68013b2af87b9c809c4637299abd929bc735109b68013b2af87b9c809c4637299abd929bc735109b68013b2af87b9c809c4637299abd929bc735109b68013b2af87b9c809c4637299abd929bc73510
countermeasure_patch_urlhttps://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510https://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510https://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510https://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510https://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510
source_cveCVE-2024-9048CVE-2024-9048CVE-2024-9048CVE-2024-9048CVE-2024-9048
cna_responsibleVulDBVulDBVulDBVulDBVulDB
software_typeProject Management SoftwareProject Management SoftwareProject Management SoftwareProject Management SoftwareProject Management Software
cvss2_vuldb_avNNNNN
cvss2_vuldb_acHHHHH
cvss2_vuldb_auNNNNN
cvss2_vuldb_ciNNNNN
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiNNNNN
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcCCCCC
cvss2_vuldb_rlOFOFOFOFOF
cvss4_vuldb_avNNNNN
cvss4_vuldb_acHHHHH
cvss4_vuldb_prNNNNN
cvss4_vuldb_vcNNNNN
cvss4_vuldb_viLLLLL
cvss4_vuldb_vaNNNNN
cvss4_vuldb_ePPPPP
cvss4_vuldb_atNNNNN
cvss4_vuldb_uiNNNNP
cvss4_vuldb_scNNNNN
cvss4_vuldb_siNNNNN
cvss4_vuldb_saNNNNN
cvss2_vuldb_basescore2.62.62.62.62.6
cvss2_vuldb_tempscore2.02.02.02.02.0
cvss3_vuldb_basescore3.13.13.13.13.1
cvss3_vuldb_tempscore2.82.82.82.82.8
cvss3_meta_basescore3.13.13.14.14.1
cvss3_meta_tempscore2.82.92.94.04.0
cvss4_vuldb_bscore6.36.36.36.32.3
cvss4_vuldb_btscore2.92.92.92.91.3
advisory_date1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)1726783200 (09/20/2024)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The manipulation of the argument loginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The patch is named 9b68013b2af87b9c809c4637299abd929bc73510. It is recommended to apply a patch to fix this issue.A vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The manipulation of the argument loginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The patch is named 9b68013b2af87b9c809c4637299abd929bc73510. It is recommended to apply a patch to fix this issue.A vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The manipulation of the argument loginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The patch is named 9b68013b2af87b9c809c4637299abd929bc73510. It is recommended to apply a patch to fix this issue.A vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The manipulation of the argument loginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The patch is named 9b68013b2af87b9c809c4637299abd929bc73510. It is recommended to apply a patch to fix this issue.
cvss3_cna_avNNNN
cvss3_cna_acHHHH
cvss3_cna_prNNNN
cvss3_cna_uiRRRR
cvss3_cna_sUUUU
cvss3_cna_cNNNN
cvss3_cna_iLLLL
cvss3_cna_aNNNN
cvss3_cna_basescore3.13.13.13.1
cvss2_cna_avNNNN
cvss2_cna_acHHHH
cvss2_cna_auNNNN
cvss2_cna_ciNNNN
cvss2_cna_iiPPPP
cvss2_cna_aiNNNN
cvss2_cna_basescore2.62.62.62.6
cve_nvd_summaryesSe ha encontrado una vulnerabilidad en y_project RuoYi hasta la versión 4.7.9. Se ha declarado como problemática. La vulnerabilidad afecta a la función SysUserServiceImpl del archivo ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java del componente Backend User Import. La manipulación del argumento loginName provoca cross site scripting. El ataque se puede lanzar de forma remota. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. El exploit se ha hecho público y puede utilizarse. El parche se llama 9b68013b2af87b9c809c4637299abd929bc73510. Se recomienda aplicar un parche para solucionar este problema.Se ha encontrado una vulnerabilidad en y_project RuoYi hasta la versión 4.7.9. Se ha declarado como problemática. La vulnerabilidad afecta a la función SysUserServiceImpl del archivo ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java del componente Backend User Import. La manipulación del argumento loginName provoca cross site scripting. El ataque se puede lanzar de forma remota. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. El exploit se ha hecho público y puede utilizarse. El parche se llama 9b68013b2af87b9c809c4637299abd929bc73510. Se recomienda aplicar un parche para solucionar este problema.Se ha encontrado una vulnerabilidad en y_project RuoYi hasta la versión 4.7.9. Se ha declarado como problemática. La vulnerabilidad afecta a la función SysUserServiceImpl del archivo ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java del componente Backend User Import. La manipulación del argumento loginName provoca cross site scripting. El ataque se puede lanzar de forma remota. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. El exploit se ha hecho público y puede utilizarse. El parche se llama 9b68013b2af87b9c809c4637299abd929bc73510. Se recomienda aplicar un parche para solucionar este problema.
cvss3_nvd_avNN
cvss3_nvd_acLL
cvss3_nvd_prNN
cvss3_nvd_uiRR
cvss3_nvd_sCC
cvss3_nvd_cLL
cvss3_nvd_iLL
cvss3_nvd_aNN
cvss3_nvd_basescore6.16.1

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Interested in the pricing of exploits?

See the underground prices here!