Threats tagged 'ghsa-258p-479w-x2p2'

A vulnerability exists in yangzongzhuan RuoYi-Vue up to version 3.9.2 affecting the SysPermissionService.getMenuPermission function. This flaw involves improper privilege management due to manipulation of the perms argument, allowing a remote attacker to potentially escalate privileges. The vendor has not responded to disclosure attempts. The CVSS score is 6.3, indicating a medium severity level.