CVE-2024-54762: SQL Injection
Published Jan 9, 2025
·Updated
Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQL injection.
Affected Software
2 affected components
Ruoyi Ruoyi<=4.7.9
Ruoyi Ruoyi<=4.7.9
Event History
Jan 9, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-54762?
CVE-2024-54762 is classified as a high severity vulnerability due to the potential for authenticated SQL injection.
2
How do I fix CVE-2024-54762?
To fix CVE-2024-54762, update to a version of Ruoyi later than 4.7.9 that addresses the SQL injection vulnerability.
3
What systems are affected by CVE-2024-54762?
CVE-2024-54762 affects Ruoyi version 4.7.9 and earlier.
4
What type of vulnerability is CVE-2024-54762?
CVE-2024-54762 is an authenticated SQL injection vulnerability.
5
What are the potential consequences of exploiting CVE-2024-54762?
Exploiting CVE-2024-54762 could allow an attacker to execute arbitrary SQL commands, potentially leading to data leakage or corruption.