y_project Ruoyi Vulnerabilities

Y_project Ruoyi vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 October 2026

Insufficient Session Expiration in y_project RuoYi up to 4.8.3
CVE-2026-108803
Y ProjectRuoyi5.3MEDIUM
Cross Site Scripting Vulnerability in RuoYi by y_project
CVE-2026-108802
Y ProjectRuoyi👾🟡5.1MEDIUM

18 December 2025

Code Injection Vulnerability in y_project RuoYi by y_project
CVE-2025-14856
Y ProjectRuoyi👾🟡5.3MEDIUM

17 May 2025

Improper Authorization Vulnerability in y_project RuoYi Product
CVE-2025-4819
Y ProjectRuoyi👾🟡2.3LOW

27 January 2025

Deserialization Vulnerability in y_project RuoYi up to 4.8.0
CVE-2025-0734
Y ProjectRuoyi👾5.1MEDIUM

21 September 2024

RuoYi Vulnerability: Cross Site Scripting Exploit Disclosed
CVE-2024-9048
Y ProjectRuoyi👾🟡6.1MEDIUM

4 July 2024

RuoYi Vulnerability: Cross-Site Scripting Attack via HttpHeaders.CONTENT_TYPE
CVE-2024-6511
y_projectRuoyi6.1MEDIUM

28 December 2023

y_project RuoYi HTTP POST Request login cross site scripting
CVE-2023-7133
y_projectRuoYi6.1MEDIUM

21 July 2023

y_project RuoYi File Upload uploadFilesPath cross site scripting
CVE-2023-3815
Y ProjectRuoyi3.5LOW

8 June 2023

y_project RuoYi filterKeyword resource consumption
CVE-2023-3163
y_projectRuoYi👾🟡7.5HIGH

16 December 2022

y_project RuoYi GenController sql injection
CVE-2022-4566
Y ProjectRuoyi5.5MEDIUM

8 December 2022

y_project RuoYi-Cloud JSON cross site scripting
CVE-2022-4348
Y ProjectRuoyi-cloud3.5LOW