CVE-2026-108800: yangzongzhuan RuoYi cross-site request forgery
Published Oct 12, 2026
·Updated
A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
1 affected component
yangzongzhuan RuoYi=4.8.3
Event History
Oct 12, 2026
CVE Published
via MITRE·04:30 AM
Data Sourced
via MITRE·04:30 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attack can be executed remotely and requires user interaction. No attacker privileges are required.
2
What security impact is reported?
The reported impact is limited to integrity. No confidentiality or availability impact is identified in the supplied severity vector.
3
Is a vendor fix or response available?
The vendor was contacted early about the disclosure but did not respond. The provided information does not identify a fix, workaround, or patched version.