Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.

Published Dec 16, 2022 · Updated Apr 21, 2025 · Assigned by mitre