CVE-2024-57436 RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
Attackers can view admin session IDs in system monitoring to impersonate administrators via crafted cookies.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-57436?
CVE-2024-57436 is a high-severity vulnerability in Ruoyi Ruoyi, published on 29 Jan 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie.
Weakness: CWE-922
Which versions are affected by CVE-2024-57436?
2 open source packages ship an affected version, including com.ruoyi:ruoyi. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
com.ruoyi:ruoyi Maven | All versions to 4.8.0 | None |
com.ruoyi:ruoyi Maven | All versions to 4.8.0 | None |
Products include Ruoyi Ruoyi.
How do I fix CVE-2024-57436?
No fix has been published for CVE-2024-57436 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-57436 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-57436 exists.
Other vulnerabilities in Ruoyi Ruoyi
Sources
Also known as GHSA-v664-qgx9-wf79.