medium6.3
CVE-2025-14856
A security vulnerability has been detected in y_project RuoYi up to 4.8.1.
Impact
A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruoyi | Ruoyi | through 4.8.1 |