high7.5
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Impact
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.ruoyi:ruoyi | < 4.7.7 | 4.7.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruoyi | Ruoyi | through 4.7.6 |