Описание
RuoYi vulnerable to arbitrary file download
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
Пакеты
Наименование
com.ruoyi:ruoyi
maven
Затронутые версииВерсия исправления
< 4.7.7
4.7.7
Связанные уязвимости
CVSS3: 7.5
nvd
почти 3 года назад
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.