Moderate severityNVD Advisory· Published Jan 29, 2025· Updated Feb 6, 2025
CVE-2024-57438
CVE-2024-57438
Description
Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.ruoyi:ruoyiMaven | <= 4.8.0 | — |
Affected products
2Patches
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.