Threats tagged 'ghsa-h7qx-c58p-3mff'

1 threat

Threats tagged 'ghsa-h7qx-c58p-3mff'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-108112ruoyi-ai · Missing Authorization Medium5.3EPSS 0.2%2026-10-09CVE Database V5CVE-2026-108112 ruoyi-ai versions 3.0.0 through 3.1.0 have a missing authorization vulnerability that allows authenticated users to delete workflows owned by other users. This occurs because the softDelete() function bypasses the ownership check, enabling deletion via the POST /workflow/del/{uuid} endpoint when supplying workflow UUIDs obtained from GET /workflow/search. EPSS 0.2%Vulnerability ageerle #ghsa-h7qx-c58p-3mff	CVE Database V5	2026-10-09

Showing 1–1 of 1 result