y_project RuoYi Whitelist Component Deserialization Vulnerability
Vulnerability
A critical deserialization vulnerability has been identified in the y_project RuoYi application, affecting versions through 4.8.0. The issue arises in the Whitelist component's getBeanName function, allowing remote exploitation.
Impact
Exploitation of this vulnerability leads to arbitrary code execution on the server where the application is running.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.1remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.