Threats tagged 'ghsa-jwvr-26h4-vc23'

A vulnerability in YunaiV/zhijiantianya ruoyi-vue-pro up to version 2026.09 affects the SMS Code Verification component in the AuthController.java file. Improper handling of the mobile/code arguments leads to improper authentication, allowing remote attackers to exploit this flaw. The vulnerability has a CVSS score of 7.3, indicating a medium severity. The vendor has not responded to disclosure requests, and no patch or remediation guidance is currently available. Public exploit code exists but there are no confirmed reports of exploitation in the wild.