CVE-2026-108800

EUVD-2026-97175
A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.54%
Common Weakness Enumeration
References
https://github.com/Bob-wentao/security-report-for-ruoyi-csrf-get-delete
https://vuldb.com/cve/CVE-2026-108800
https://vuldb.com/submit/962009
https://vuldb.com/vuln/416577
https://vuldb.com/vuln/416577/cti