Description
Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.ruoyi:ruoyi | <= 4.8.0 | — | GHSA-h5jh-rp76-q242 |