CVE-2024-57439

Summary

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/peccc/restful_vul/blob/main/ruoyi_dos/ruoyi_dos.md

References

• https://github.com/yangzongzhuan/RuoYi
• https://gitee.com/y_project/RuoYi
• https://ruoyi.vip/
• https://github.com/peccc/restful_vul/blob/main/ruoyi_dos/ruoyi_dos.md

• ←Previous
• Next→