CVE-2022-23868: Ruoyi

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

RuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx log file.

Affected products

• Ruoyi Ruoyi: version 4.7.2 only

Published 2022-03-30. Last modified 2026-06-17.