CyberRota Analysis
AI-GeneratedDromara RuoYi-Vue-Plus versions up to 5.6.2 are vulnerable due to improper authorization in multiple Workflow Endpoint functions, allowing remote attackers to exploit this flaw. Successful exploitation could lead to unauthorized access to sensitive workflows and data. Organizations using this software should prioritize patching to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. The attack can be launched remotely.