SQL Injection Vulnerability in GoView Data Endpoint of YunaiV's ruoyi-vue-pro

CVE-2026-97321

What is CVE-2026-97321?

A security vulnerability has been identified in the GoView Data Endpoint of YunaiV's ruoyi-vue-pro, where improper handling of SQL query inputs allows for potential SQL injection attacks. Specifically, the issue is present in the getDataBySQL function within the GoViewDataServiceImpl Java class. This flaw enables attackers to manipulate SQL queries, potentially allowing unauthorized data access or manipulation. Remote exploitation of this vulnerability is possible, raising significant concerns regarding data security and integrity. Despite early notification, the vendor has yet to respond to the disclosed vulnerability, heightening the risk for users of the affected product.

References