R1bbit vulnerabilities
We track 5 vulnerabilities in R1bbit products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2025.
Latest R1bbit vulnerabilities
- 7.3 High severity
Yimioa: Improper Access Control
Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.
- 8.8 High severity
ywoa: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely.
- 9.8 Critical severity
ywoa: Incorrect Privilege Assignment
A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown code of the file /oa/setup/setup.jsp. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit h
- 8.8 High severity
ywoa: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotel
- 8.8 High severity
ywoa: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection