CVE-2024-57436: Infoleak
Published Jan 29, 2025
·Updated
RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie.
Affected Software
2 affected components
maven/com.ruoyi:ruoyi<=4.8.0
Ruoyi Ruoyi=4.8.0
Event History
Jan 29, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
Affected Software
Advisory Published
via GitHub·03:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-57436?
CVE-2024-57436 is considered a critical vulnerability as it allows unauthorized access to sensitive session data.
2
How do I fix CVE-2024-57436?
To fix CVE-2024-57436, update RuoYi to the latest version beyond 4.8.0 that addresses this vulnerability.
3
What impact does CVE-2024-57436 have on admin users?
CVE-2024-57436 can allow attackers to impersonate admin users by exploiting exposed session IDs.
4
Is CVE-2024-57436 present in versions prior to 4.8.0?
CVE-2024-57436 specifically affects RuoYi version 4.8.0, so versions prior to this may be safe.
5
What should I do if I've been affected by CVE-2024-57436?
If affected by CVE-2024-57436, it is crucial to revoke all session tokens and update the system immediately.