yangzongzhuan RuoYi

• CVE-2026-108825 Medium 5.4 yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management 0.2%
• CVE-2026-108800 Medium 4.3 yangzongzhuan RuoYi cross-site request forgery 0.2%
• CVE-2026-4564 Medium 4.7 yangzongzhuan RuoYi Quartz Job job code injection 0.3%
• CVE-2025-10989 Medium 6.3 yangzongzhuan RuoYi selectAll improper authorization 0.4%
• CVE-2025-10473 Medium 6.3 yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injection 0.4%
• CVE-2025-10384 Medium 5.4 yangzongzhuan RuoYi Role cancelAll improper authorization 0.4%
• CVE-2025-8847 Low 3.5 yangzongzhuan RuoYi edit cross site scripting 0.4%
• CVE-2025-7907 Medium 4.3 yangzongzhuan RuoYi Druid application-druid.yml default credentials 0.5%
• CVE-2025-7906 Medium 6.3 yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload 0.4%
• CVE-2025-7903 Medium 4.3 yangzongzhuan RuoYi Image Source ui layer 0.3%
• CVE-2025-7902 Low 3.5 yangzongzhuan RuoYi SysNoticeController.java addSave cross site scripting 0.3%
• CVE-2025-7901 Medium 4.3 yangzongzhuan RuoYi Swagger UI index.html cross site scripting 0.9%