Skip to content

CVE record · 1 source

CVE-2026-119647

CVSS 4.3

RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept that allows authenticated…

Vendor: Dromara
Product: RuoYi-Vue-Plus
CVSS v3.1: 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 42h ago

RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept that allows authenticated…

RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept that allows authenticated users to read users of other departments. Users holding system:user:list under a…

CVSS 4.3 CVE-2026-119647 Dromara