Yy_project

Products

Exploited and recent CVEs

• CVE-2026-108803 Medium 6.3 y_project RuoYi Disable API add changeStatus session expiration 0.2%
• CVE-2026-108802 Low 3.5 y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting 0.2%
• CVE-2025-14856 Medium 6.3 y_project RuoYi getnames code injection 0.4%
• CVE-2025-4819 Low 3.1 y_project RuoYi Offline Logout batchForceLogout improper authorization 0.5%
• CVE-2025-0734 Medium 4.7 y_project RuoYi Whitelist getBeanName deserialization 0.5%
• CVE-2024-9048 Low 3.1 y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting 0.4%
• CVE-2024-6511 Low 3.5 y_project RuoYi Content-Type isJsonRequest cross site scripting 0.3%
• CVE-2023-7133 Medium 4.3 y_project RuoYi HTTP POST Request login cross site scripting 0.7%
• CVE-2023-3815 Low 3.5 y_project RuoYi File Upload uploadFilesPath cross site scripting 0.6%
• CVE-2023-3163 Low 3.5 y_project RuoYi filterKeyword resource consumption 1.4%
• CVE-2022-4566 Medium 5.5 y_project RuoYi GenController sql injection 0.9%
• CVE-2022-4348 Low 3.5 y_project RuoYi-Cloud JSON cross site scripting 0.4%