Threats tagged 'ghsa-3fc6-q4cm-p67h'

A security vulnerability exists in YunaiV yudao-cloud up to version 3.8.0 affecting the JwtAuthenticationTokenFilter.java component of Ruoyi-Vue-Pro. The flaw involves improper authentication due to manipulation of the mock-token argument in the doFilterInternal function. This vulnerability allows remote exploitation. Public exploit code has been released. The vendor has not responded to disclosure attempts.