Advisories · Technology
zhijiantianya ruoyi-vue-pro.
Every CVE that names zhijiantianya ruoyi-vue-pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Authentication bypass
- CWE-799
- CVSS 6.9 Medium
YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Authentication bypass
- CVSS 5.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Open redirect
- CVSS 6.9 Medium
YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Other injection
- SQL injection
- CVSS 5.3 Medium
YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal
- YunaiV ruoyi-vue-pro
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversal
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro Front-End Store upload path traversal
- zhijiantianya ruoyi-vue-pro
- Path traversal
- CVSS 5.3 Medium
zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine
- zhijiantianya ruoyi-vue-pro
- Code injection
- CWE-791