RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
| Software | From | Fixed in |
|---|---|---|
com.ruoyi / ruoyi
|
- | 4.6.x |
| ruoyi / ruoyi | - | 4.6.0.x |