CVE-2024-57439: RuoYi Denial of Service Vulnerability for Admin Users
Summary
CVE-2024-57439: RuoYi vulnerable to Denial of Service by attackers with admin privileges. Affects com.ruoyi:ruoyi versions < 4.8.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
RuoYi is a popular open-source management system built on Java, designed to provide a comprehensive solution for enterprise applications. It offers features such as user management, role-based access control, and various administrative tools. However, in version 4.8.0, a critical vulnerability has been identified that allows users with admin privileges to exploit the reset password interface, leading to potential Denial of Service (DoS) attacks.
Vulnerability Detail
The vulnerability arises from the reset password interface in RuoYi v4.8.0, where attackers with admin privileges can duplicate the login name of an account. This action can lead to a Denial of Service (DoS) condition, effectively locking out legitimate users and disrupting normal operations. The issue is classified under CWE-281, indicating improper authorization, which allows unauthorized actions to be performed by users who should not have such capabilities.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, restrict admin access to trusted users only and monitor the reset password interface for unusual activity. Additionally, consider implementing rate limiting on the password reset requests to mitigate the risk of DoS attacks.
Conclusion
In summary, CVE-2024-57439 presents a significant risk to RuoYi users with admin privileges, allowing for potential Denial of Service attacks. It is crucial to update to a patched version and implement recommended workarounds to protect against this vulnerability.
See every vulnerability recorded for com.ruoyi:ruoyi →
FAQ
CVE-2024-57439 is a vulnerability in the RuoYi management system that allows admin users to cause a Denial of Service by duplicating login names.
Any instance of RuoYi version 4.8.0 that has admin users can be affected by this vulnerability.
The primary impact is a Denial of Service, which can lock out legitimate users and disrupt normal operations of the application.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score for this vulnerability is 4.9, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for com.ruoyi:ruoyi.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
