← Database

CVE-2024-46076

CRITICAL CVSS: 9.8 Published: 2024-10-07 Modified: 2026-06-17

Description

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code.

Affected Platforms

Ruoyi Ruoyi

Weakness Type

CWE-94

References