CVE record · 1 source
CVE-2026-110107
CVSS 4.2RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users'…
- CVSS
- 4.2
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users'…
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE…