ruoyi-vue-pro vulnerabilities
7 known vulnerabilities in ruoyi-vue-pro from Zhijiantianya. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
ruoyi-vue-pro: Improper Authentication
A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/code results in improp
- 7.3 High severity
ruoyi-vue-pro: Incorrect Privilege Assignment
A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderController.java of the com
- 7.3 High severity
ruoyi-vue-pro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.04-jdk8-SNAPSHOT. The impacted element is the function generateUploadPath of the file yudao-module-infra/src/main/java/cn/iocoder/yudao/module/infra/service/file/FileServiceImpl.java of
- 8.1 High severity
ruoyi-vue-pro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue affects some unknown processing of the file /admin-api/mp/material/upload-temporary of the component Material Upload Interface. The manipulati
- 8.1 High severity
ruoyi-vue-pro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknown code of the file /admin-api/mp/material/upload-permanent of the component Material Upload Interface. The manipulation of the argument File
- 9.1 Critical severity
ruoyi-vue-pro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. Such manipulation of the argument path leads to path traversal. The at
- 9.1 Critical severity
ruoyi-vue-pro: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown function of the file /app-api/infra/file/upload of the component Front-End Store Interface. This manipulation of the argument path causes path traversal. The attack is