5.3
Moyenne
CVE-2026-77795 A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2
Description
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. The attack can be launched remotely.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RuoYi-Vue-Plus 5.6 | 5.6.0 → 5.6.2 | Pas de correctif indiqué |
Autres CVE de RuoYi-Vue-Plus
Les 6 CVE de RuoYi-Vue-Plus →
CVE-2026-119647
RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}
5.3
Moyenne
CVE-2026-110106
RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated…
2.3
Faible
CVE-2026-58176
RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task…
6.5
Moyenne
CVE-2026-2819
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3
5.3
Moyenne