Vendor

    Y Project

    11 known vulnerabilities in products by Y Project, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Y Project
    HighCVE-2023-3163

    y_project RuoYi filterKeyword resource consumption

    also in 1 other product

    		3.5
    MediumCVE-2026-108803

    y_project RuoYi Disable API add changeStatus session expiration

    		6.3
    CriticalCVE-2022-4566

    y_project RuoYi GenController sql injection

    also in 1 other product

    		5.5
    HighCVE-2025-14856

    y_project RuoYi getnames code injection

    also in 1 other product

    		6.3
    MediumCVE-2026-108802

    y_project RuoYi Dictionary Data Drawer Preview add renderDrawer cross site scripting

    		3.5
    HighCVE-2025-0734

    y_project RuoYi Whitelist getBeanName deserialization

    also in 1 other product

    		4.7
    MediumCVE-2023-7133

    y_project RuoYi HTTP POST Request login cross site scripting

    also in 1 other product

    		4.3
    MediumCVE-2024-9048

    y_project RuoYi Backend User Import SysUserServiceImpl.java SysUserServiceImpl cross site scripting

    also in 1 other product

    		3.1
    MediumCVE-2023-3815

    y_project RuoYi File Upload uploadFilesPath cross site scripting

    also in 1 other product

    		3.5
    LowCVE-2025-4819

    y_project RuoYi Offline Logout batchForceLogout improper authorization

    also in 1 other product

    		3.1
    MediumCVE-2024-6511

    y_project RuoYi Content-Type isJsonRequest cross site scripting

    also in 1 other product

    		3.5

    Products

    Products by Y Project
    RuoYi110