Threats tagged 'ghsa-cj4v-qxg2-mjcc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.7%	CVE-2026-88616RuoYi-Vue-Plus · Incorrect Authorization High8.8EPSS 0.7%2026-09-15GCVE DatabaseCVE-2026-88616 RuoYi-Vue-Plus version 6.0.0 contains a vulnerability that allows remote attackers with limited privileges to execute arbitrary code via multiple components related to workflow task completion. The affected components include FlwTaskController.java, FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, and the POST /workflow/task/completeTask endpoint. This vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.7%Report on CVE-2026-88616 Vulnerability CWE-863 #ghsa-cj4v-qxg2-mjcc	GCVE Database	2026-09-15

Page 1 of 1