CVE-2024-57521

CRITICAL (10.0) No Patch
cwe-89

Threat Intelligence

⚠️ CRITICAL GAP - Exploits exist but no detection available
🔍 Detection Tools: None available in major open-source tools
⚔️ Exploit Availability: GitHub PoC

How we test →

What is it?

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java.

Am I affected?

You're affected if you use SQL Injection vulnerability. Specific version info not stated in the advisory.

How to fix

See the GitHub issue/commit: https://github.com/mrlihd/CVE-2024-57521-SQL-Injection-PoC/blob/main/README.md As immediate mitigation: restrict network access to affected systems if possible.

References