CVE-2024-54762 – “Ruoyi Authenticated SQL Injection”

The following table lists the changes that have been made to the
CVE-2024-54762 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jan. 09, 2025

    Action Type Old Value New Value
    Added Description Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQL injection.
    Added Reference https://github.com/yangzongzhuan/RuoYi/
    Added Reference https://locrian-lightning-dc7.notion.site/CVE-2024-54762-1748e5e2b1a280b4a549dcce2c4823e8
Share the Post:

Related Posts