CVE-2021-28411: Ruoyi

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges.

Affected products

• Ruoyi Ruoyi: version 3.4.0 only

Published 2023-08-11. Last modified 2026-06-17.