Iocoder - vulnerabilities (CVEs)
16 CVEs in 2 products, 1 in the last 30 days, newest from 2026-10-14.
Products
- Ruoyi-vue-pro - 13 CVEs
- Yudao-cloud - 3 CVEs
Newest CVEs of Iocoder
- CVE-2026-110610 - CVSS 5.4 (medium), 2026-10-14: ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to…
- CVE-2026-57950 - CVSS 8.6 (high), 2026-06-29: ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderController that allows attackers with…
- CVE-2026-57949 - CVSS 7.1 (high), 2026-06-29: ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET…
- CVE-2025-10988 - CVSS 8.8 (high), 2025-09-26: A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Such manipulation leads…
- CVE-2025-10987 - CVSS 8.8 (high), 2025-09-26: A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of…
- CVE-2025-10278 - CVSS 8.8 (high), 2025-09-12: A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09. Impacted is an unknown function of the file /crm/contact/transfer. This manipulation of the…
- CVE-2025-10277 - CVSS 8.8 (high), 2025-09-12: A vulnerability was detected in YunaiV yudao-cloud up to 2025.09. This issue affects some unknown processing of the file /crm/receivable/submit. The…
- CVE-2025-10276 - CVSS 8.8 (high), 2025-09-12: A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09. This vulnerability affects unknown code of the file /crm/contract/transfer.…
- CVE-2025-10275 - CVSS 8.8 (high), 2025-09-12: A weakness has been identified in YunaiV yudao-cloud up to 2025.09. This affects an unknown part of the file /crm/business/transfer. Executing a manipulation…
- CVE-2025-2744 - CVSS 5.4 (medium), 2025-03-25: A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file…
- CVE-2025-2743 - CVSS 8.1 (high), 2025-03-25: A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue affects some unknown processing of the…
- CVE-2025-2742 - CVSS 8.1 (high), 2025-03-25: A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknown code of the file…
- CVE-2025-2708 - CVSS 9.1 (critical), 2025-03-24: A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/infra/file/upload of the component…
- CVE-2025-2707 - CVSS 9.1 (critical), 2025-03-24: A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload of the component…
- CVE-2025-2040 - CVSS 6.3 (medium), 2025-03-06: A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file…
- CVE-2022-37158 - CVSS 9.8 (critical), 2022-08-25: RuoYi v3.8.3 has a Weak password vulnerability in the management system.
