What is CVE-2024-54762?

CVE-2024-54762 is a medium-severity vulnerability in Ruoyi, classified under SQL Injection. CVSS score: 6.3/10. Published 2025-01-09.

How severe is CVE-2024-54762?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Is CVE-2024-54762 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Ruoyi

CVE-2024-54762

Ruoyi v.4.7.9 and before contains an authenticated SQL injection vulnerability. This is because the filterKeyword method does not completely filter SQL injection keywords, resulting in the risk of SQL injection.

Vulnerability class: SQL Injection

EPSS: 0.003 (17.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Ruoyi
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

Lunax0/CVE_

References

cve@mitre.org (Product)
cve@mitre.org (Exploit)

Frequently asked questions

What is CVE-2024-54762?: CVE-2024-54762 is a medium-severity vulnerability in Ruoyi, classified under SQL Injection. CVSS score: 6.3/10. Published 2025-01-09.
How severe is CVE-2024-54762?: Medium severity. CVSS v3 base score is 6.3 out of 10.
Is CVE-2024-54762 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.