Yangzongzhuan vulnerabilities
We track 2 vulnerabilities in Yangzongzhuan products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Yangzongzhuan vulnerabilities
- 8.8 High severity
RuoYi: Incorrect Privilege Assignment
A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be in
- 9.8 Critical severity
RuoYi: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil.java of the component Blacklist Handler. The manipulation results in sql injection. The attack may b