← Database

CVE-2024-57521

CRITICAL CVSS: 10.0 Published: 2025-12-23 Modified: 2026-06-17

Description

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java.

Affected Platforms

Ruoyi Ruoyi

Weakness Type

CWE-89

References