Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1nM2hoLXE1NWYtOWczd84AAzvf
RuoYi Uncontrolled Resource Consumption vulnerability
A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability.
Permalink: https://github.com/advisories/GHSA-g3hh-q55f-9g3wJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nM2hoLXE1NWYtOWczd84AAzvf
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: 11 months ago
Updated: 6 months ago
CVSS Score: 3.5
CVSS vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Identifiers: GHSA-g3hh-q55f-9g3w, CVE-2023-3163
References:
- https://nvd.nist.gov/vuln/detail/CVE-2023-3163
- https://gitee.com/y_project/RuoYi/issues/I78DOR
- https://vuldb.com/?ctiid.231090
- https://vuldb.com/?id.231090
- https://github.com/advisories/GHSA-g3hh-q55f-9g3w
Affected Packages
maven:com.ruoyi:ruoyi
Affected Version Ranges: <= 4.7.7No known fixed version