Vulnerabilities

TI-2025-10059 CVE-2025-10988 · GHSA-x3pg-94gm-79p3

YunaiV ruoyi-vue-pro transfer improper authorization

LOW 24

A vulnerability was identified in YunaiV ruoyi-vue-pro up to 2025.09.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00306 Published 2025-09-26 No fix listed CWE-266

TI-2025-09433 CVE-2025-10278 · GHSA-2mjj-x5cq-gf63

YunaiV ruoyi-vue-pro transfer improper authorization

MEDIUM 57

A flaw has been found in YunaiV ruoyi-vue-pro up to 2025.09.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00306 Published 2025-09-12 No fix listed CWE-266

TI-2025-09431 CVE-2025-10276 · GHSA-2w47-9873-w85f

YunaiV ruoyi-vue-pro transfer improper authorization

MEDIUM 59

A security vulnerability has been detected in YunaiV ruoyi-vue-pro up to 2025.09.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00306 Published 2025-09-12 No fix listed CWE-266

TI-2025-02397 CVE-2025-2744 · GHSA-9r2v-hq4w-8pc6

zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal

MEDIUM 57

A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00746 Published 2025-03-25 No fix listed CWE-22

TI-2025-02396 CVE-2025-2743 · GHSA-p56m-pq92-4wxr

zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00883 Published 2025-03-25 No fix listed CWE-22

TI-2025-02395 CVE-2025-2742 · GHSA-r6xg-mjqp-qqg4

zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal

MEDIUM 57

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00884 Published 2025-03-25 No fix listed CWE-22

TI-2025-02368 CVE-2025-2708 · GHSA-f6qj-5j3v-gwmm

zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversal

MEDIUM 57

A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00744 Published 2025-03-24 No fix listed CWE-22

TI-2025-02367 CVE-2025-2707 · GHSA-4gqh-r946-jvgc

zhijiantianya ruoyi-vue-pro Front-End Store upload path traversal

MEDIUM 57

A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00729 Published 2025-03-24 No fix listed CWE-22

TI-2025-01778 CVE-2025-2040 · GHSA-hv2c-wf43-5v98

zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine

MEDIUM 57

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00493 Published 2025-03-06 No fix listed CWE-1336

TI-2022-17318 CVE-2022-37158 · GHSA-2pgm-5x83-qh65

RuoYi v3.8.3 has a Weak password vulnerability in the management system.

MEDIUM 44

RuoYi v3.8.3 has a Weak password vulnerability in the management system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00968 Published 2022-08-25 No fix listed CWE-521

Vulnerabilities

Filters