RuoYi v4.8.2 contains an access control vulnerability that allows unauthenticated attackers to exfiltrate sensitive department data, posing a significant risk to organizational privacy.

This vulnerability involves incorrect access control within the selectDept function. It allows an unauthenticated attacker to bypass security checks and retrieve sensitive department-level information from the application.

The ability for an unauthenticated user to access department data constitutes a severe breach of confidentiality. Given the CVSS score of 7.5, this high-severity flaw could lead to the exposure of internal organizational structures, employee data, or strategic information, potentially resulting in regulatory non-compliance and loss of stakeholder trust.

Immediate Action: Review the official RuoYi repository and issue trackers for a security update or patch addressing the selectDept access control flaw. If no patch is available, restrict access to the affected function at the network or application level.

Proactive Monitoring: Monitor server access logs for anomalous requests targeting the selectDept endpoint. Review database query patterns to identify unusual spikes in data retrieval related to department records.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized access attempts to the vulnerable endpoint. Ensure that the application is not exposed directly to the public internet if the functionality is not intended for external users.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the provided GitHub Gist reference.

The severity of this vulnerability, combined with the presence of a public proof-of-concept, necessitates immediate attention from security teams. Administrators should prioritize identifying instances of RuoYi v4.8.2 within their environment and applying vendor-provided security patches or implementing the necessary access restrictions to prevent unauthorized data exfiltration.