CVE record · 1 source
CVE-2026-108112
CVSS 5.4ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST…
- Vendor
- Cisco
- Product
- ftd
- CVSS
- 5.4
- Exposure class
- Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST…
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}. Attackers can obtain workflow UUIDs from GET…