CVE-2024-57436

RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring

High · published January 29, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.2th percentile
Published
2025-01-29T00:00Z
EPSS history
Timeline
  • 29 JAN 00:00Z
    RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring
    cvelistv5