Jjcjgo

**Name of the Vulnerable Software and Affected Versions** RuoYi version 4.8.2 **Description** An issue in the code generation module allows an authenticated attacker with administrative privileges to access sensitive database information. This is possible through a SQL Injection in the '/tool/gen/createTable' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.