RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list.

Published Jan 29, 2025 · Updated Feb 5, 2025 · Assigned by mitre