CVE-2022-4348: Improper Neutralization

December 8, 2022 (updated December 12, 2022)

A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215108.

References

gitee.com/y_project/RuoYi-Cloud/issues/I5IRC8
gitee.com/y_project/RuoYi-Cloud/pulls/224/files
github.com/advisories/GHSA-vp22-232w-h9x8
nvd.nist.gov/vuln/detail/CVE-2022-4348
vuldb.com/?id.215108

Code Behaviors & Features

Detect and mitigate CVE-2022-4348 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →