CVE-2026-38812 PUBLISHED

Assigner: mitre
Reserved: 06.04.2026 Published: 15.06.2026 Updated: 16.06.2026

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generation module and may allow an authenticated attacker with administrative privileges to access sensitive database information.

Product Status

Vendor n/a
Product n/a
Versions
  • Version n/a is affected

References

Problem Types

  • n/a text