{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.6"}],"component":"com.ruoyi:ruoyi","cve_ids":["CVE-2023-49371"],"ecosystem":"Maven","epss":0.03655,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fg29-37px-c7wm","id":"tcs_01M5N8VXM2AVW1Q6K2B99NJEWC","modified_at":"2023-12-07T22:52:00Z","published_at":"2023-12-01T15:31:22Z","references":["https://osv.dev/vulnerability/GHSA-fg29-37px-c7wm","https://nvd.nist.gov/vuln/detail/CVE-2023-49371","https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847","https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fg29-37px-c7wm","url":"https://osv.dev/vulnerability/GHSA-fg29-37px-c7wm"}],"summary":"RuoYi vulnerable to SQL injection vulnerability"}