CVE-2024-6511: y_project RuoYi Content-Type isJsonRequest cross site scripting
A vulnerability classified as problematic was found in yproject RuoYi up to 4.7.9. Affected by this vulnerability is the function isJsonRequest of the component Content-Type Handler. The manipulation of the argument HttpHeaders.CONTENTTYPE leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-270343.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6511?
CVE-2024-6511 is classified as a problematic vulnerability.
How do I fix CVE-2024-6511?
To fix CVE-2024-6511, update the RuoYi software to version 4.8.0 or newer.
What kind of vulnerability is CVE-2024-6511?
CVE-2024-6511 is a cross-site scripting (XSS) vulnerability related to the Content-Type Handler.
Which versions of RuoYi are affected by CVE-2024-6511?
Versions of RuoYi up to and including 4.7.9 are affected by CVE-2024-6511.
What component is involved in CVE-2024-6511?
The isJsonRequest function of the Content-Type Handler component is involved in CVE-2024-6511.