RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
{
"severity": "CRITICAL",
"nvd_published_at": "2023-12-01T15:15:07Z",
"github_reviewed_at": "2023-12-01T19:24:17Z",
"github_reviewed": true,
"cwe_ids": [
"CWE-89"
]
}