What’s Vulnerable › Vulnerabilities

CVE-2023-3163: y_project RuoYi filterKeyword resource consumption

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-06-08 · updated 2026-06-17
• Weakness: CWE-400

Description

A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnerability.

Affected products

• yangzongzhuan RuoYi: through 4.7.7

References

• https://gitee.com/y_project/RuoYi/issues/I78DOR
• https://vuldb.com/?ctiid.231090
• https://vuldb.com/?id.231090
• https://gitee.com/y_project/RuoYi/issues/I78DOR
• https://vuldb.com/?ctiid.231090
• https://vuldb.com/?id.231090

Get alerted when CVE-2023-3163 or the next vulnerability affects your stack