RuoYi Unauthorized Session ID Exposure Vulnerability Allowing Admin Impersonation

An elevation of privilege vulnerability exists in RuoYi version 4.8.0, allowing unauthorized users with system monitoring privileges to view the admin session ID. This exposure can be exploited to impersonate admin users by using a crafted cookie that includes the captured session ID.

Impact

Exploitation of this vulnerability allows for unauthorized users to impersonate admin users, potentially leading to unauthorized access and privileges within the application.

Reproduction

To reproduce this vulnerability, a user with system monitoring privileges must access the system monitoring feature, where the admin session ID is displayed. Once the session ID is obtained, it can be used to impersonate the admin by crafting a cookie that includes the session ID and sending it to the application.