← All advisories

Critical severity9.8NVD Advisory· Published Dec 1, 2023· Updated Jun 17, 2026

CVE-2023-49371

CVE-2023-49371

Description

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.ruoyi:ruoyiMaven	<= 4.6	—

Affected products

3

Ruoyi/Ruoyi2 versions
cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*range: <=4.6.0
- (no CPE)
ghsa-coords
pkg:maven/com.ruoyi/ruoyi
Range: <= 4.6

Patches

Vulnerability mechanics

References

4

github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.mdnvdExploitWEB
gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-fg29-37px-c7wmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-49371ghsaADVISORY

News mentions

0

No linked articles in our index yet.