{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.8.0"}],"component":"com.ruoyi:ruoyi","cve_ids":["CVE-2024-57436"],"ecosystem":"Maven","epss":0.00644,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v664-qgx9-wf79","id":"tcs_01M5N9DC9765Q6MJXSHT2WNCCJ","modified_at":"2025-01-29T19:27:06.089061Z","published_at":"2025-01-29T15:31:35Z","references":["https://osv.dev/vulnerability/GHSA-v664-qgx9-wf79","https://nvd.nist.gov/vuln/detail/CVE-2024-57436","https://gitee.com/y_project/RuoYi","https://github.com/peccc/restful_vul/blob/main/ruoyi_elevation_of_privileges/ruoyi_elevation_of_privileges.md","https://github.com/yangzongzhuan/RuoYi","https://ruoyi.vip"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-v664-qgx9-wf79","url":"https://osv.dev/vulnerability/GHSA-v664-qgx9-wf79"}],"summary":"RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring"}